7.8

CVE-2025-40081: linux

CVSS: 7.8v3.1HighDeferred
AliasesUBUNTU-CVE-2025-40081DEBIAN-CVE-2025-40081
Published 28-10-2025Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2025-40081 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 4.1% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.15%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 50 · Related 45
DLA-4379-1DLA-4404-1DSA-6053-1MGASA-2025-0309MGASA-2025-0310OPENSUSE-SU-2025:15702-1

Timeline

  1. 28-10-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() Cast nr_pages to unsigned long to avoid overflow when handling large AUX buffer sizes (>= 2 GiB).

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.15%

Chance of exploitation in the next 30 days

Percentile

4%

Versus all other CVEs

30-day change

+0.01 pp

From 0.14% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu152 products
  • linuxAll versions (No fix recorded) | < 5.15.0-170.180 | < 6.8.0-106.106 | < 6.17.0-14.14
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1100.107 | < 6.8.0-1050.53 | < 6.17.0-1007.7
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.158-1 | < 6.12.57-1 | < 6.17.6-1
Linux1 product
  • linux≥ d5d9696b03808bc6be723cc85288c912c3a05606, < 656e9a5d69acdd1b20462f4a33378b90ddcb9626 | ≥ d5d9696b03808bc6be723cc85288c912c3a05606, < 9c045d4501f7f70724a3bbb561f4f22d292bbfe6 | ≥ d5d9696b03808bc6be723cc85288c912c3a05606, < 5d01f2b81568289443d22f1e13a363f829de6343 | ≥ d5d9696b03808bc6be723cc85288c912c3a05606, < 7500384d3c9587593d75ded3b006835e7aa73ef8 | ≥ d5d9696b03808bc6be723cc85288c912c3a05606, < 379cae2cb982f571cda9493ac573ab71125fd299 | ≥ d5d9696b03808bc6be723cc85288c912c3a05606, < 1a19ba8e1f4ff24ece8ca69b79df8442c431db90 | ≥ d5d9696b03808bc6be723cc85288c912c3a05606, < e516cfd19b0f4c774a57b17fb43a7f41991f0735 | ≥ d5d9696b03808bc6be723cc85288c912c3a05606, < a29fea30dd93da16652930162b177941abd8c75e | 4.15

3 vendors · 154 products

References

42 links
Show all 42 references