GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-40112 (GCVE-0-2025-40112)

Vulnerability from cvelistv5 – Published: 2025-11-12 10:23 – Updated: 2026-08-05 12:07
VLAI
Title
sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
Summary
In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara The referenced commit introduced exception handlers on user-space memory references in copy_from_user and copy_to_user. These handlers return from the respective function and calculate the remaining bytes left to copy using the current register contents. This commit fixes a couple of bad calculations and a broken epilogue in the exception handlers. This will prevent crashes and ensure correct return values of copy_from_user and copy_to_user in the faulting case. The behaviour of memcpy stays unchanged.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e , < 05440320ea3e249d5f984918f2bf51210c1a7c03 (git)
Affected: 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e , < 7823fc4d8ab5e57f8db7806ff2530c03c166c4bb (git)
Affected: 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e , < 37547d8e6eba87507279ee3dfddfd9dc46335454 (git)
Affected: 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e , < a365ee556e45f780ee322b349a06efdad0c1458f (git)
Affected: 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e , < 8cdeb5e482d3fdce7e825444b6ca3865e24c0228 (git)
Affected: 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e , < a90ce516a73dbe087f9bf3dbf311301a58d125c6 (git)
Affected: 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e , < 088c5098ec6d6b0396edfbf3dad3e81de8469c1c (git)
Affected: 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e , < 0b67c8fc10b13a9090340c5f8a37d308f4e1571c (git)
Affected: bfc8be6593097cb074d3912ba2f27565cfbb7d6e (git)
Affected: a15859f9d8396cce7c55ccdb7e75f70f14cbc349 (git)
Affected: 4.4.34 , < 4.5 (semver)
Affected: 4.8.10 , < 4.9 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 4.9
Unaffected: 0 , < 4.9 (semver)
Unaffected: 5.4.301 , ≤ 5.4.* (semver)
Unaffected: 5.10.246 , ≤ 5.10.* (semver)
Unaffected: 5.15.195 , ≤ 5.15.* (semver)
Unaffected: 6.1.156 , ≤ 6.1.* (semver)
Unaffected: 6.6.112 , ≤ 6.6.* (semver)
Unaffected: 6.12.53 , ≤ 6.12.* (semver)
Unaffected: 6.17.3 , ≤ 6.17.* (semver)
Unaffected: 6.18 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/sparc/lib/NGmemcpy.S"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "05440320ea3e249d5f984918f2bf51210c1a7c03",
              "status": "affected",
              "version": "7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e",
              "versionType": "git"
            },
            {
              "lessThan": "7823fc4d8ab5e57f8db7806ff2530c03c166c4bb",
              "status": "affected",
              "version": "7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e",
              "versionType": "git"
            },
            {
              "lessThan": "37547d8e6eba87507279ee3dfddfd9dc46335454",
              "status": "affected",
              "version": "7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e",
              "versionType": "git"
            },
            {
              "lessThan": "a365ee556e45f780ee322b349a06efdad0c1458f",
              "status": "affected",
              "version": "7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e",
              "versionType": "git"
            },
            {
              "lessThan": "8cdeb5e482d3fdce7e825444b6ca3865e24c0228",
              "status": "affected",
              "version": "7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e",
              "versionType": "git"
            },
            {
              "lessThan": "a90ce516a73dbe087f9bf3dbf311301a58d125c6",
              "status": "affected",
              "version": "7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e",
              "versionType": "git"
            },
            {
              "lessThan": "088c5098ec6d6b0396edfbf3dad3e81de8469c1c",
              "status": "affected",
              "version": "7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e",
              "versionType": "git"
            },
            {
              "lessThan": "0b67c8fc10b13a9090340c5f8a37d308f4e1571c",
              "status": "affected",
              "version": "7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "bfc8be6593097cb074d3912ba2f27565cfbb7d6e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a15859f9d8396cce7c55ccdb7e75f70f14cbc349",
              "versionType": "git"
            },
            {
              "lessThan": "4.5",
              "status": "affected",
              "version": "4.4.34",
              "versionType": "semver"
            },
            {
              "lessThan": "4.9",
              "status": "affected",
              "version": "4.8.10",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/sparc/lib/NGmemcpy.S"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.9"
            },
            {
              "lessThan": "4.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.301",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.246",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.195",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.156",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.112",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.301",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.246",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.195",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.156",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.112",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.53",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17.3",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.8.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsparc: fix accurate exception reporting in copy_{from_to}_user for Niagara\n\nThe referenced commit introduced exception handlers on user-space memory\nreferences in copy_from_user and copy_to_user. These handlers return from\nthe respective function and calculate the remaining bytes left to copy\nusing the current register contents. This commit fixes a couple of bad\ncalculations and a broken epilogue in the exception handlers. This will\nprevent crashes and ensure correct return values of copy_from_user and\ncopy_to_user in the faulting case. The behaviour of memcpy stays unchanged."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The fault must occur on the calling process\u0027s own user-space buffer during a syscall, so the attacker needs local execution to issue syscalls with a deliberately unmapped/PROT_NONE user address. No remote or adjacent-network path can drive copy_from_user/copy_to_user faults on behalf of another task.\nAC:L - The attacker fully controls every precondition \u2014 mmap a buffer, punch a PROT_NONE/unmapped page, and pick the length and alignment that steer the copy into the buggy 16-byte or unaligned loop; the broken __restore_asi epilogue is hit on every fault regardless. No race, no memory-layout luck, and the Niagara copy routines are auto-selected by CPU type with no special kernel config.\nPR:L - Any unprivileged local user can pass a partially-invalid user pointer to ordinary syscalls such as read(), write(), sendmsg() or ioctl(); no capability, namespace or filesystem privilege is involved.\nUI:N - The attacking process triggers the faulting copy entirely on its own via a syscall; no action by another user or administrator is needed.\nS:U - The corruption is confined to the kernel of the running system \u2014 no hypervisor, IOMMU or sandbox boundary is crossed.\nC:H - The under-reported remainder leaves 8\u201316 bytes of the kernel destination buffer unzeroed by _inline_copy_from_user()\u0027s memset and treated as valid user data, repeatedly leaking stale kernel heap/stack contents into buffers that syscalls process or write back; the missing register-window restore additionally exposes kernel pointers as the copy\u0027s return value.\nI:H - The dead `restore` makes raw_copy_from_user return a destination pointer instead of a byte count, so memset(to + (n - res), 0, res) becomes an unbounded out-of-bounds kernel write, and the unpopped register window leaves the caller with a corrupted %sp/%fp and a wrong saved return address \u2014 memory corruption with attacker-influenced pointers and hijackable control flow.\nA:H - Returning without restoring the register window desynchronizes the entire SPARC window stack and the caller\u0027s stack frame, and the giant memset length guarantees a wild write; the result is an immediate kernel oops/panic on every triggered fault, trivially repeatable by an unprivileged user."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:07:52.886Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/05440320ea3e249d5f984918f2bf51210c1a7c03"
        },
        {
          "url": "https://git.kernel.org/stable/c/7823fc4d8ab5e57f8db7806ff2530c03c166c4bb"
        },
        {
          "url": "https://git.kernel.org/stable/c/37547d8e6eba87507279ee3dfddfd9dc46335454"
        },
        {
          "url": "https://git.kernel.org/stable/c/a365ee556e45f780ee322b349a06efdad0c1458f"
        },
        {
          "url": "https://git.kernel.org/stable/c/8cdeb5e482d3fdce7e825444b6ca3865e24c0228"
        },
        {
          "url": "https://git.kernel.org/stable/c/a90ce516a73dbe087f9bf3dbf311301a58d125c6"
        },
        {
          "url": "https://git.kernel.org/stable/c/088c5098ec6d6b0396edfbf3dad3e81de8469c1c"
        },
        {
          "url": "https://git.kernel.org/stable/c/0b67c8fc10b13a9090340c5f8a37d308f4e1571c"
        }
      ],
      "title": "sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-40112",
    "datePublished": "2025-11-12T10:23:16.690Z",
    "dateReserved": "2025-04-16T07:20:57.167Z",
    "dateUpdated": "2026-08-05T12:07:52.886Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-40112",
      "date": "2026-09-16",
      "epss": "0.00158",
      "percentile": "0.05343"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-40112\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-11-12T11:15:40.460\",\"lastModified\":\"2026-07-30T06:24:12.250\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nsparc: fix accurate exception reporting in copy_{from_to}_user for Niagara\\n\\nThe referenced commit introduced exception handlers on user-space memory\\nreferences in copy_from_user and copy_to_user. These handlers return from\\nthe respective function and calculate the remaining bytes left to copy\\nusing the current register contents. This commit fixes a couple of bad\\ncalculations and a broken epilogue in the exception handlers. This will\\nprevent crashes and ensure correct return values of copy_from_user and\\ncopy_to_user in the faulting case. The behaviour of memcpy stays unchanged.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"arch/sparc/lib/NGmemcpy.S\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e\",\"lessThan\":\"05440320ea3e249d5f984918f2bf51210c1a7c03\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e\",\"lessThan\":\"7823fc4d8ab5e57f8db7806ff2530c03c166c4bb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e\",\"lessThan\":\"37547d8e6eba87507279ee3dfddfd9dc46335454\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e\",\"lessThan\":\"a365ee556e45f780ee322b349a06efdad0c1458f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e\",\"lessThan\":\"8cdeb5e482d3fdce7e825444b6ca3865e24c0228\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e\",\"lessThan\":\"a90ce516a73dbe087f9bf3dbf311301a58d125c6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e\",\"lessThan\":\"088c5098ec6d6b0396edfbf3dad3e81de8469c1c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e\",\"lessThan\":\"0b67c8fc10b13a9090340c5f8a37d308f4e1571c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bfc8be6593097cb074d3912ba2f27565cfbb7d6e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a15859f9d8396cce7c55ccdb7e75f70f14cbc349\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4.4.34\",\"lessThan\":\"4.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.8.10\",\"lessThan\":\"4.9\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"arch/sparc/lib/NGmemcpy.S\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.9\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.9\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.301\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.246\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.195\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.156\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.112\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.53\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.17.3\",\"lessThanOrEqual\":\"6.17.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/05440320ea3e249d5f984918f2bf51210c1a7c03\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/088c5098ec6d6b0396edfbf3dad3e81de8469c1c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/0b67c8fc10b13a9090340c5f8a37d308f4e1571c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/37547d8e6eba87507279ee3dfddfd9dc46335454\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/7823fc4d8ab5e57f8db7806ff2530c03c166c4bb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/8cdeb5e482d3fdce7e825444b6ca3865e24c0228\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/a365ee556e45f780ee322b349a06efdad0c1458f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/a90ce516a73dbe087f9bf3dbf311301a58d125c6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "current_release_date": "2026-01-09T10:57:55+00:00",
      "cve": "CVE-2025-40112",
      "id": "CVE-2025-40112",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-40112.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-30T01:49:05Z",
      "cve": "CVE-2025-40112",
      "id": "CVE-2025-40112",
      "initial_release_date": "2025-11-13T00:24:30Z",
      "product_status:known_not_affected": "515",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-40112",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-40112.json",
      "version": "8"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.