UBUNTU-CVE-2025-40159

In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdpdesc validation Turned out certain clearly invalid values passed in xdpdesc from userspace can pass xp,unalignedvalidatedesc and then lead to UBs or just invalid frames to be queued for xmit...

CVE-2025-40159

The CVE-2025-40159 entry concerns the Linux kernel XDP/AF_XDP path (xsk) where unsafely constructed xdp_desc values from userspace could bypass validation in xp_{,un}aligned_validate_desc() and cause overflows to queue invalid frames. Root cause details from the description: desc->len near U32...