CVE-2025-40004

🗓️ 20 Oct 2025 05:26:08Reported by LinuxType

The Linux kernel fixes a buffer overflow in the USB 9pfs transport layer by validating actual data size before memcpy.

Reporter	Title	Published	Views	Family All 166
AstraLinux	Astra Linux – Vulnerability in Linux 6.12	13 Jan 202614:01	–	astralinux
BDU FSTEC	The vulnerability of the usb9pfs_rxComplete() function in the net/9p/trans_usbg.c module of the 9P protocol implementation in the Linux operating system allows a hacker to cause a service failure.	10 Mar 202600:00	–	bdu_fstec
Circl	CVE-2025-40004	20 Oct 202507:18	–	circl
CNNVD	Linux kernel 安全漏洞	20 Oct 202500:00	–	cnnvd
Cvelist	CVE-2025-40004 net/9p: Fix buffer overflow in USB transport layer	20 Oct 202505:26	–	cvelist
Debian CVE	CVE-2025-40004	20 Oct 202505:26	–	debiancve
EUVD	EUVD-2025-35036	20 Oct 202506:30	–	euvd
NVD	CVE-2025-40004	20 Oct 202506:15	–	nvd
OPENSUSE Linux	kernel-devel-6.17.5-1.1 on GA media (moderate)	28 Oct 202500:00	–	opensuse
OpenVAS	Ubuntu: Security Advisory (USN-8029-1)	13 Feb 202600:00	–	openvas

Vulners

CNA

Node

linux linux_kernelRange6.12–6.12.53

linux linux_kernelRange6.13.0–6.17.3

linux linux_kernelRange6.18.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/9p/trans_usbg.c"
    ],
    "versions": [
      {
        "version": "a3be076dc174d9022a71a12554feb4c97b5c4d5c",
        "lessThan": "0da18d49f874d444ad83c8a546fa33bfcf2f582c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a3be076dc174d9022a71a12554feb4c97b5c4d5c",
        "lessThan": "df8462f0fc045b4475dc494a5787a03c972ba2a2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a3be076dc174d9022a71a12554feb4c97b5c4d5c",
        "lessThan": "c04db81cd0288dfc68b7a0f7d09bd49b40bba451",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/9p/trans_usbg.c"
    ],
    "versions": [
      {
        "version": "6.12",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.12",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.53",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.17.3",
        "lessThanOrEqual": "6.17.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/c04db81cd0288dfc68b7a0f7d09bd49b40bba451
git	www.git.kernel.org/stable/c/df8462f0fc045b4475dc494a5787a03c972ba2a2
git	www.git.kernel.org/stable/c/0da18d49f874d444ad83c8a546fa33bfcf2f582c

17 Jun 2026 09:21Current

6.6Medium risk

Vulners AI Score6.6

EPSS0.00249