Wind River Support Network

HomeDefectsLIN1025-5610
Acknowledged

LIN1025-5610 : Security Advisory - linux - CVE-2025-40031

Created: Oct 29, 2025    Updated: Oct 30, 2025
Found In Version: 10.25.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]tee: fix register_shm_helper()[EOL][EOL]In register_shm_helper(), fix incorrect error handling for a call to[EOL]iov_iter_extract_pages(). A case is missing for when[EOL]iov_iter_extract_pages() only got some pages and return a number larger[EOL]than 0, but not the requested amount.[EOL][EOL]This fixes a possible NULL pointer dereference following a bad input from[EOL]ioctl(TEE_IOC_SHM_REGISTER) where parts of the buffer isn't mapped.
Live chat
Online