CVE-2025-40004

CVE-2025-40004 describes a Linux kernel vulnerability in the USB 9pfs transport layer (net/9p) where buffer overflow can occur due to inconsistent size validation between header parsing and data copying. Specifically, usb9pfs_rx_header() validates only the declared packet size, while usb9pfs_rx_c...

CVE-2025-40004 net/9p: Fix buffer overflow in USB transport layer

In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix buffer overflow in USB transport layer A buffer overflow vulnerability exists in the USB 9pfs transport layer where inconsistent size validation between packet header parsing and actual data copying allows a malicious...