Overflow Vulnerability in ARM SPE within Linux Kernel

CVE-2025-40081

What is CVE-2025-40081?

A vulnerability has been identified in the Linux kernel related to the ARM Speak Performance Enhancements (ARM SPE) that allows for an overflow during the handling of large Auxiliary (AUX) buffer sizes, specifically those that reach 2 GiB or more. This issue arises in the function handling the buffer size, where the numerical page count needs to be cast to an unsigned long to prevent overflow. If exploited, this vulnerability could lead to stability issues or potentially allow for unintended behavior in kernel performance monitoring tools.

References