CVE-2025-40114 iio: light: Add check for array bounds in veml6075_read_int_time_ms
A missing bounds check in the veml6075 light sensor driver could allow out-of-bounds reads, potentially causing a kernel crash or instability.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-40114?
CVE-2025-40114 is a high-severity vulnerability in Linux kernel, published on 18 Apr 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
iio: light: Add check for array bounds in veml6075_read_int_time_ms
The array contains only 5 elements, but the index calculated by veml6075_read_int_time_index can range from 0 to 7, which could lead to out-of-bounds access. The check prevents this issue.
Coverity Issue CID 1574309: (#1 of 1): Out-of-bounds read (OVERRUN) overrun-local: Overrunning array veml6075_it_ms of 5 4-byte elements at element index 7 (byte offset 31) using index int_index (which evaluates to 7)
This is hardening against potentially broken hardware. Good to have but not necessary to backport.
Weakness: CWE-129
Which versions are affected by CVE-2025-40114?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-40114?
Apply the vendor's patch.
Is CVE-2025-40114 being exploited?
There is no known exploitation of CVE-2025-40114 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-40114, DEBIAN-CVE-2025-40114, GHSA-425r-hmhf-r25x, ROOT-OS-UBUNTU-2404-CVE-2025-40114, UBUNTU-CVE-2025-40114.