CVE-2025-40020

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

can: peak_usb: fix shift-out-of-bounds issue

Explicitly uses a 64-bit constant when the number of bits used for its shifting is 32 (which is the case for PC CAN FD interfaces supported by this driver).

[mkl: update subject, apply manually]

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d, < 572c656802781cc57f4a3231eefa83547e75ed78; >= bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d, < 61b1dd4c614935169d12bdecc26906e37b508618; >= bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d, < 48822a59ecc47d353400d38b1941d3ae7591ffff; >= bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d, < 176c81cbf9c4e348610a421aad800087c0401f60; >= bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d, < 17edec1830e48c0becd61642d0e40bc753243b16; >= bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d, < eb79ed970670344380e77d62f8188e8015648d94; >= bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d, < 394c58017e5f41043584c345106cae16a4613710; >= bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d, < c443be70aaee42c2d1d251e0329e0a69dd96ae54
LinuxLinux3.4

References

Timeline

Published
Oct 24, 2025
Last modified
Oct 19, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-40021In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynaCVE-2025-40022In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx Commit 1b3CVE-2025-40023In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't expose sysfs attributes not applicable for VFs VFs caCVE-2025-400247.8In the Linux kernel, the following vulnerability has been resolved: vhost: Take a reference on the task in struct vhost_task. vhost_task_cCVE-2025-400257.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer for non inode dnode As syzCVE-2025-400267.9In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O CVE-2025-400277.8In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9_fd_cancelled Syzkaller reports a KASACVE-2025-400287.8In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a CVE-2025-40029In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check return value of platform_get_resource() platform_geCVE-2025-40035.5A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB. It has been classified as problematic. This affects the function InternalACVE-2025-40030In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() WhiCVE-2025-40031In the Linux kernel, the following vulnerability has been resolved: tee: fix register_shm_helper() In register_shm_helper(), fix incorrect
CVE-2025-40020: Unscored | Vulnix