vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-40293

iommufd: Don't overflow during division for dirty tracking

N/A
Published: December 8, 2025 at 12:46 AM UTC
Updated: October 14, 2026 at 10:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: iommufd: Don't overflow during division for dirty tracking If pgshift is 63 then BITS_PER_TYPE(*bitmap->bitmap) * pgsize will overflow to 0 and this triggers divide by 0. In this case the index should just be 0, so reorganize things to divide by shift and avoid hitting any overflows.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
58ccf0190d19d9a8a41f8a02b9e06742b58df4a16.1
Vendor states this is fixed in 07105e61882ff4a7d58db63cc5f9e90c6c60506c (fixed)
Vendor states this is fixed in 4c8a4f1d34eced168cc0b3a3dfe7b6dcc2090f69 (fixed)
Vendor states this is fixed in cb30dfa75d55eced379a42fd67bd5fb7ec38555e (fixed)
Vendor states this is fixed in dbf316fc90aa954dcd5440817f4b944627ed63e0 (fixed)
Vendor states this is fixed in de7f2c67ceb1941b05b04ac35458a03e93cc57b1 (fixed)
Vendor states this is fixed in 6.1 (unaffected)
Vendor states this is fixed in 6.1.159 (unaffected)
Vendor states this is fixed in 6.12.58 (unaffected)
Vendor states this is fixed in 6.17.8 (unaffected)
Vendor states this is fixed in 6.18 (unaffected)
Vendor states this is fixed in 6.6.117 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (5)

Source: cverecord
https://git.kernel.org/stable/c/07105e61882ff4a7d58db63cc5f9e90c6c60506c
Source: cverecord
https://git.kernel.org/stable/c/4c8a4f1d34eced168cc0b3a3dfe7b6dcc2090f69
Source: cverecord
https://git.kernel.org/stable/c/de7f2c67ceb1941b05b04ac35458a03e93cc57b1
Source: cverecord
https://git.kernel.org/stable/c/dbf316fc90aa954dcd5440817f4b944627ed63e0
Source: cverecord
https://git.kernel.org/stable/c/cb30dfa75d55eced379a42fd67bd5fb7ec38555e

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card