{"id":"CVE-2025-39940","title":"dm-stripe: fix a possible integer overflow","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndm-stripe: fix a possible integer overflow\n\nThere's a possible integer overflow in stripe_io_hints if we have too\nlarge chunk size. Test if the overflow happened, and i…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < 891ab8c6954199e4f36029b49df86c8b1d6b0b2f","Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < f8f64254bca5ae58f3b679441962bda4c409f659","Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < ee27658c239b27721397f3e4eb16370b5cce596e","Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < 1071d560afb4c245c2076494226df47db5a35708","Linux 2.6.31"],"published":"2025-10-04","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:37:37.824Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39940","references":[{"url":"https://git.kernel.org/stable/c/891ab8c6954199e4f36029b49df86c8b1d6b0b2f"},{"url":"https://git.kernel.org/stable/c/f8f64254bca5ae58f3b679441962bda4c409f659"},{"url":"https://git.kernel.org/stable/c/ee27658c239b27721397f3e4eb16370b5cce596e"},{"url":"https://git.kernel.org/stable/c/1071d560afb4c245c2076494226df47db5a35708"}],"tags":["cve.org"],"epss":0.00196,"epssPercentile":0.09181,"ingestedAt":"2026-10-21T12:48:53.687Z","slug":"CVE-2025-39940","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndm-stripe: fix a possible integer overflow\n\nThere's a possible integer overflow in stripe_io_hints if we have too\nlarge chunk size. Test if the overflow happened, and if it did, don't set\nlimits->io_min and limits->io_opt;\n\n## Affected\n\n- `Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < 891ab8c6954199e4f36029b49df86c8b1d6b0b2f`\n- `Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < f8f64254bca5ae58f3b679441962bda4c409f659`\n- `Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < ee27658c239b27721397f3e4eb16370b5cce596e`\n- `Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < 1071d560afb4c245c2076494226df47db5a35708`\n- `Linux 2.6.31`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}