Linux Kernel Vulnerability in DMA Transfer Handling by Vendor

CVE-2025-40172

What is CVE-2025-40172?

A vulnerability exists in the Linux kernel's handling of DMA transfers, specifically within the find_and_map_user_pages() function. When a DMA transfer request is made with a length set to zero, or in scenarios where the host device incorrectly requests continuation after all bytes have been transferred, the function may fail to allocate necessary resources. This oversight results in access to uninitialized memory, leading to a general protection fault, which can cause instability and may be exploited. Proper error handling measures have been integrated to return an EINVAL in these cases to mitigate the issues.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References