---
id: CVE-2025-39940
title: 'dm-stripe: fix a possible integer overflow'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dm-stripe: fix a possible integer overflow

  There's a possible integer overflow in stripe_io_hints if we have too
  large chunk size. Test if the overflow happened, and i…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 <
    891ab8c6954199e4f36029b49df86c8b1d6b0b2f
  - >-
    Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 <
    f8f64254bca5ae58f3b679441962bda4c409f659
  - >-
    Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 <
    ee27658c239b27721397f3e4eb16370b5cce596e
  - >-
    Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 <
    1071d560afb4c245c2076494226df47db5a35708
  - Linux 2.6.31
published: '2025-10-04'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:37:37.824Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-39940'
references:
  - url: 'https://git.kernel.org/stable/c/891ab8c6954199e4f36029b49df86c8b1d6b0b2f'
  - url: 'https://git.kernel.org/stable/c/f8f64254bca5ae58f3b679441962bda4c409f659'
  - url: 'https://git.kernel.org/stable/c/ee27658c239b27721397f3e4eb16370b5cce596e'
  - url: 'https://git.kernel.org/stable/c/1071d560afb4c245c2076494226df47db5a35708'
tags:
  - cve.org
epss: 0.00196
epssPercentile: 0.09181
ingestedAt: '2026-10-21T12:48:53.687Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dm-stripe: fix a possible integer overflow

There's a possible integer overflow in stripe_io_hints if we have too
large chunk size. Test if the overflow happened, and if it did, don't set
limits->io_min and limits->io_opt;

## Affected

- `Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < 891ab8c6954199e4f36029b49df86c8b1d6b0b2f`
- `Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < f8f64254bca5ae58f3b679441962bda4c409f659`
- `Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < ee27658c239b27721397f3e4eb16370b5cce596e`
- `Linux >= 40bea431274c247425e7f5970d796ff7b37a2b22 < 1071d560afb4c245c2076494226df47db5a35708`
- `Linux 2.6.31`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.