CVE-2025-40126
sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
Reported by linux · Published November 12, 2025
In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC The referenced commit introduced exception handlers on user-space memory references in copy_from_user and copy_to_user. These handlers return from the respective function and calculate the remaining bytes left to copy using the current register contents. This commit fixes a couple of bad calculations. This will fix the return value of copy_from_user and copy_to_user in the faulting case. The behaviour of memcpy stays unchanged.
EPSS 0.23% · 13.8th percentile
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Linux | Linux | 9b137f277cc3297044aabd950f589e505d30104c, 59424dc0d0e044b2eb007686a4724ddd91d57db5, 57c278500fce3cd4e1c540700c0b05426a958393, 4fba1713001195e59cfc001ff1f2837dab877efb, 41c18baee66134e6ef786eb075c1b6adb22432b0, 0bf3dc3a2156f1c5ddaba4b85d09767874634114 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada, cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada, cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada |
| Linux | Linux | 4.9, 0, 5.4.301 |
| Linux | Linux | 4.8.10, 6.12.53, 6.17.3 |
| linux | linux_kernel | 4.9, 4.9, 4.9 |
Timeline
- Nov 11, 2025 CVE Published
- Nov 12, 2025 EPSS Score (30 in total, the first dated here)
- Mar 29, 2026 Distribution Patch (194 in total, the first dated here)
- Mar 29, 2026 Security Advisory (201 in total, the first dated here)
- May 23, 2026 CVE Updated
- Jun 8, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2025-40126
vulnetix vdb fixes CVE-2025-40126Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-40126/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart