CVE-2025-40051 vhost: vringh: Modify the return value check
Incorrect return value checks in vhost vringh could lead to undefined behavior or logic errors in the Linux kernel.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-40051?
CVE-2025-40051 is a high-severity vulnerability in Linux, published on 28 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
vhost: vringh: Modify the return value check
The return value of copy_from_iter and copy_to_iter can't be negative, check whether the copied lengths are equal.
Which versions are affected by CVE-2025-40051?
How do I fix CVE-2025-40051?
Apply the vendor's patch.
Is CVE-2025-40051 being exploited?
There is no known exploitation of CVE-2025-40051 in the wild and no public exploit code.
Sources
Also known as AZL-68864, BELL-CVE-2025-40051, DEBIAN-CVE-2025-40051, GHSA-9g2x-xr9c-j935, ROOT-OS-DEBIAN-12-CVE-2025-40051, ROOT-OS-DEBIAN-13-CVE-2025-40051 and 2 more.