CVE-2025-40046: Linux

High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix overshooting recv limit It's reported that sometimes a zcrx request can receive more than was requested. It's caused by io_zcrx_recv_skb() adjusting desc->count for all received buffers including frag lists, but then doing recursive calls to process frag list skbs, which leads to desc->count double accounting and underflow.

Affected products

• Linux Linux: from 6.15, before 6.17.3 (fixed in 6.17.3)

Published 2025-10-28. Last modified 2026-07-30.