Input Validation Flaw in Linux Kernel Affects Multiple Distributions

CVE-2025-40193

What is CVE-2025-40193?

A flaw in the Linux kernel allows a malicious user to supply arbitrary input to the memdup_user_nul() function without adequate validation, potentially leading to a kernel crash. This vulnerability is similar in nature to another security issue addressed in the kernel, where bad input could lead to system instability. The patch enhances user input checks in the affected area, providing better protection against such exploit attempts.

References