CVE-2025-40126

Source
https://cve.org/CVERecord?id=CVE-2025-40126
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40126.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-40126
Downstream
Published
2025-11-12T10:23:20.460Z
Modified
2026-03-20T12:43:11.344719Z
Summary
sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
Details

In the Linux kernel, the following vulnerability has been resolved:

sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC

The referenced commit introduced exception handlers on user-space memory references in copyfromuser and copytouser. These handlers return from the respective function and calculate the remaining bytes left to copy using the current register contents. This commit fixes a couple of bad calculations. This will fix the return value of copyfromuser and copytouser in the faulting case. The behaviour of memcpy stays unchanged.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40126.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada
Fixed
0bf3dc3a2156f1c5ddaba4b85d09767874634114
Fixed
41c18baee66134e6ef786eb075c1b6adb22432b0
Fixed
59424dc0d0e044b2eb007686a4724ddd91d57db5
Fixed
9b137f277cc3297044aabd950f589e505d30104c
Fixed
674ff598148a28bae0b5372339de56f2abf0b1d1
Fixed
7de3a75bbc8465d816336c74d50109e73501efab
Fixed
57c278500fce3cd4e1c540700c0b05426a958393
Fixed
4fba1713001195e59cfc001ff1f2837dab877efb
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1731d90d8a558ecb20cdee0c2c001ae8e15c251d
Last affected
b0580eadc19ff3a617a7d07cfaf2a985153c114e

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40126.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.9.0
Fixed
5.4.301
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.246
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.195
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.156
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.112
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.53
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40126.json"