CVE-2025-40126

Summary

In the Linux kernel, the following vulnerability has been resolved:

sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC

The referenced commit introduced exception handlers on user-space memory references in copy_from_user and copy_to_user. These handlers return from the respective function and calculate the remaining bytes left to copy using the current register contents. This commit fixes a couple of bad calculations. This will fix the return value of copy_from_user and copy_to_user in the faulting case. The behaviour of memcpy stays unchanged.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxcb736fdbb208eb3420f1a2eb2bfc024a6e9dcada < 0bf3dc3a2156f1c5ddaba4b85d09767874634114affected
LinuxLinuxcb736fdbb208eb3420f1a2eb2bfc024a6e9dcada < 41c18baee66134e6ef786eb075c1b6adb22432b0affected
LinuxLinuxcb736fdbb208eb3420f1a2eb2bfc024a6e9dcada < 59424dc0d0e044b2eb007686a4724ddd91d57db5affected
LinuxLinuxcb736fdbb208eb3420f1a2eb2bfc024a6e9dcada < 9b137f277cc3297044aabd950f589e505d30104caffected
LinuxLinuxcb736fdbb208eb3420f1a2eb2bfc024a6e9dcada < 674ff598148a28bae0b5372339de56f2abf0b1d1affected
LinuxLinuxcb736fdbb208eb3420f1a2eb2bfc024a6e9dcada < 7de3a75bbc8465d816336c74d50109e73501efabaffected
LinuxLinuxcb736fdbb208eb3420f1a2eb2bfc024a6e9dcada < 57c278500fce3cd4e1c540700c0b05426a958393affected
LinuxLinuxcb736fdbb208eb3420f1a2eb2bfc024a6e9dcada < 4fba1713001195e59cfc001ff1f2837dab877efbaffected
LinuxLinux1731d90d8a558ecb20cdee0c2c001ae8e15c251daffected
LinuxLinuxb0580eadc19ff3a617a7d07cfaf2a985153c114eaffected
LinuxLinux4.4.34 < 4.5affected
LinuxLinux4.8.10 < 4.9affected
LinuxLinux4.9affected
LinuxLinux0 < 4.9unaffected
LinuxLinux5.4.301 <= 5.4.*unaffected
LinuxLinux5.10.246 <= 5.10.*unaffected
LinuxLinux5.15.195 <= 5.15.*unaffected
LinuxLinux6.1.156 <= 6.1.*unaffected
LinuxLinux6.6.112 <= 6.6.*unaffected
LinuxLinux6.12.53 <= 6.12.*unaffected
LinuxLinux6.17.3 <= 6.17.*unaffected
LinuxLinux6.18 <= *unaffected

Weaknesses

References