Integer Overflow Vulnerability in Linux Kernel dm-stripe Module

CVE-2025-39940

What is CVE-2025-39940?

An integer overflow vulnerability exists in the Linux kernel's dm-stripe module, specifically within the stripe_io_hints function. When handling excessively large chunk sizes, an overflow may occur, potentially leading to improper setting of input/output limits and affecting system stability. It is crucial for users to apply the latest patches to mitigate any risks associated with this flaw.

References