Kernel Panic in Linux Kernel due to Struct Ops Return Value Mismanagement

CVE-2025-40079

What is CVE-2025-40079?

A vulnerability in the Linux Kernel's handling of struct ops return values has been identified, leading to potential kernel panics. This issue arises when a pointer returned by the 'bpf_fifo_dequeue' function is incorrectly treated as a 32-bit value. The sign extension from 32-bit to 64-bit does not conform to the RISC-V ABI, particularly for struct operations. This mismanagement can result in significant system stability issues, making it critical for users to promptly apply security updates to mitigate possible exploitation.

References