Back to CVE records
Not yet scoredPublished Nov 12, 2025

CVE-2025-40193xtensa: simdisk: add input size check in proc_write_simdisk

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in proc_write_simdisk A malicious user could pass an arbitrarily bad value to memdup_user_nul(), potentially causing kernel crash. This follows the same pattern as commit ee76746387f6 ("netdevsim: prevent bad user input in nsim_dev_health_break_write()")

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from b6c7e873daf765e41233b9752083b66442703b7a before f40405ccfb87b71175f2d5d004c0b8a0aebcc2cf; from b6c7e873daf765e41233b9752083b66442703b7a before 151bd88859474cdaccc1e4c8b21fbf72dbba2ab4; from b6c7e873daf765e41233b9752083b66442703b7a before d381de7fd4cdc928ede96987dc64b133e6480dd6; from b6c7e873daf765e41233b9752083b66442703b7a before a0c2c36d864ef3676b05cfd8c58b72ee3214cb1a; from b6c7e873daf765e41233b9752083b66442703b7a before 5d5f08fd0cd970184376bee07d59f635c8403f63
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.