Out-of-Bounds Access in Linux Kernel Affects Device Interfacing

CVE-2025-40114

Summary

A vulnerability in the Linux kernel's device interfacing component affects the veml6075_read_int_time_ms function, which improperly calculates array access indices. The function failed to enforce limits on the index value, allowing potential out-of-bounds access to an array intended to store light sensor data. While this issue could lead to erratic behavior or security risks under certain conditions—especially with faulty hardware—the vulnerability is addressed with added array bounds checks to enhance system resilience against such errors.

References