In the Linux kernel, the following vulnerability has been resolved:
sparc: fix accurate exception reporting in copy{fromto}_user for UltraSPARC
The referenced commit introduced exception handlers on user-space memory references in copyfromuser and copytouser. These handlers return from the respective function and calculate the remaining bytes left to copy using the current register contents. This commit fixes a couple of bad calculations. This will fix the return value of copyfromuser and copytouser in the faulting case. The behaviour of memcpy stays unchanged.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40126.json"
}