Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.3
CVE-2025-40114: Linux kernel light driver may read beyond memory
CVE-2025-40114 · published 1 year ago
Summary
The light sensor driver in several Linux kernel builds (standard, HWE edge, AWS, and Azure versions) could try to read data from an array using an index that is too large. This out‑of‑bounds read can cause the system to behave unpredictably or crash. Updating to a kernel version that includes the added bounds check resolves the risk.
What to do
- Update canonical linux-aws-6.8 to version 6.8.0-1041.43~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1041.47~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1042.45~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-86.87~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1039.39~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-86.87.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1041.44~22.04.2.
- Update canonical linux-oracle-6.8 to version 6.8.0-1038.39~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-86.87~22.04.1.
- Update canonical linux-realtime-6.8 to version 6.8.1-1036.37~22.04.1.
- Update canonical linux to version 6.8.0-86.87.
- Update canonical linux-aws to version 6.8.0-1041.43.
- Update canonical linux-azure to version 6.8.0-1041.47.
- Update canonical linux-azure-6.11 to version 6.11.0-1018.18~24.04.1.
- Update canonical linux-azure-nvidia to version 6.8.0-1029.32.
- Update canonical linux-gcp to version 6.8.0-1042.45.
- Update canonical linux-gcp-6.11 to version 6.11.0-1016.16~24.04.1.
- Update canonical linux-gke to version 6.8.0-1038.43.
- Update canonical linux-gkeop to version 6.8.0-1025.28.
- Update canonical linux-hwe-6.11 to version 6.11.0-28.28~24.04.1.
- Update canonical linux-ibm to version 6.8.0-1039.39.
- Update canonical linux-lowlatency to version 6.8.0-86.87.1.
- Update canonical linux-lowlatency-hwe-6.11 to version 6.11.0-1015.16~24.04.2.
- Update canonical linux-nvidia to version 6.8.0-1041.44.
- Update canonical linux-nvidia-6.11 to version 6.11.0-1012.12.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1041.44.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1012.12.
- Update canonical linux-oem-6.11 to version 6.11.0-1024.24.
- Update canonical linux-oracle to version 6.8.0-1038.39.
- Update canonical linux-raspi to version 6.8.0-1041.45.
- Update canonical linux-aws-fips to version 6.8.0-1041.43+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1044.50+fips1.
- Update canonical linux-fips to version 6.8.0-86.87+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1042.45+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2032.33.
- Update canonical linux-realtime to version 6.8.1-1036.37.
- Update canonical linux to version 6.8.0-138.138.aikido.86.
- Update canonical rootio-linux to version 6.8.0-138.138.aikido.86.
- Update canonical linux-xilinx to version 6.8.0-1018.19.
- Update canonical linux-bluefield to version 6.8.0-1012.16.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux kernel to version 6.14.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 6.8, < 6.12.23 >= 6.13, < 6.13.11 >= 6.14, < 6.14.2 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1041.43~22.04.1 Fix: upgrade to 6.8.0-1041.43~22.04.1
|
Showing 50 of 123. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1041.47~22.04.1 Fix: upgrade to 6.8.0-1041.47~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1042.45~22.04.1 Fix: upgrade to 6.8.0-1042.45~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-86.87~22.04.1 Fix: upgrade to 6.8.0-86.87~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1039.39~22.04.1 Fix: upgrade to 6.8.0-1039.39~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-86.87.1~22.04.1 Fix: upgrade to 6.8.0-86.87.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1041.44~22.04.2 Fix: upgrade to 6.8.0-1041.44~22.04.2
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1038.39~22.04.1 Fix: upgrade to 6.8.0-1038.39~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-86.87~22.04.1 Fix: upgrade to 6.8.0-86.87~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1036.37~22.04.1 Fix: upgrade to 6.8.1-1036.37~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-86.87 Fix: upgrade to 6.8.0-86.87
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1041.43 Fix: upgrade to 6.8.0-1041.43
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1041.47 Fix: upgrade to 6.8.0-1041.47
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 |
< 6.11.0-1018.18~24.04.1 Fix: upgrade to 6.11.0-1018.18~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia |
< 6.8.0-1029.32 Fix: upgrade to 6.8.0-1029.32
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1042.45 Fix: upgrade to 6.8.0-1042.45
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 |
< 6.11.0-1016.16~24.04.1 Fix: upgrade to 6.11.0-1016.16~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1038.43 Fix: upgrade to 6.8.0-1038.43
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1025.28 Fix: upgrade to 6.8.0-1025.28
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 |
< 6.11.0-28.28~24.04.1 Fix: upgrade to 6.11.0-28.28~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1039.39 Fix: upgrade to 6.8.0-1039.39
|
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-86.87.1 Fix: upgrade to 6.8.0-86.87.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 |
< 6.11.0-1015.16~24.04.2 Fix: upgrade to 6.11.0-1015.16~24.04.2
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1041.44 Fix: upgrade to 6.8.0-1041.44
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 |
< 6.11.0-1012.12 Fix: upgrade to 6.11.0-1012.12
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1041.44.1 Fix: upgrade to 6.8.0-1041.44.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1012.12 Fix: upgrade to 6.8.0-1012.12
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 |
< 6.11.0-1024.24 Fix: upgrade to 6.11.0-1024.24
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1038.39 Fix: upgrade to 6.8.0-1038.39
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1041.45 Fix: upgrade to 6.8.0-1041.45
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1012.16 Fix: upgrade to 6.8.0-1012.16
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1041.43+fips1 Fix: upgrade to 6.8.0-1041.43+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1044.50+fips1 Fix: upgrade to 6.8.0-1044.50+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-86.87+fips1 Fix: upgrade to 6.8.0-86.87+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1042.45+fips1 Fix: upgrade to 6.8.0-1042.45+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2032.33 Fix: upgrade to 6.8.0-2032.33
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1036.37 Fix: upgrade to 6.8.1-1036.37
|
| Root:Ubuntu:24.04 | canonical | linux |
< 6.8.0-138.138.aikido.86 Fix: upgrade to 6.8.0-138.138.aikido.86
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-138.138.aikido.86 Fix: upgrade to 6.8.0-138.138.aikido.86
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1018.19 Fix: upgrade to 6.8.0-1018.19
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Linux | linux | kernel |
>= 6.14.0, < 6.14.2 Fix: upgrade to 6.14.2
|
Original advisory text
iio: light: Add check for array bounds in veml6075_read_int_time_ms
In the Linux kernel, the following vulnerability has been resolved:
iio: light: Add check for array bounds in veml6075_read_int_time_ms
The array contains only 5 elements, but the index calculated by
veml6075_read_int_time_index can range from 0 to 7,
which could lead to out-of-bounds access. The check prevents this issue.
Coverity Issue
CID 1574309: (#1 of 1): Out-of-bounds read (OVERRUN)
overrun-local: Overrunning array veml6075_it_ms of 5 4-byte
elements at element index 7 (byte offset 31) using
index int_index (which evaluates to 7)
This is hardening against potentially broken hardware. Good to have
but not necessary to backport.
iio: light: Add check for array bounds in veml6075_read_int_time_ms
The array contains only 5 elements, but the index calculated by
veml6075_read_int_time_index can range from 0 to 7,
which could lead to out-of-bounds access. The check prevents this issue.
Coverity Issue
CID 1574309: (#1 of 1): Out-of-bounds read (OVERRUN)
overrun-local: Overrunning array veml6075_it_ms of 5 4-byte
elements at element index 7 (byte offset 31) using
index int_index (which evaluates to 7)
This is hardening against potentially broken hardware. Good to have
but not necessary to backport.
References
- https://git.kernel.org/stable/c/18a08b5632809faa671279b3cd27d5f96cc5a3f0 URL
- https://ubuntu.com/security/notices/USN-7594-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7594-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7605-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7606-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7605-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7594-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7628-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7835-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7835-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7835-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7835-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7835-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7835-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7887-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7887-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7940-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7940-2 Vendor Advisory
- https://ubuntu.com/security/CVE-2025-40114 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-40114 Third Party Advisory
- https://git.kernel.org/linus/ee735aa33db16c1fb5ebccbaf84ad38f5583f3cc Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40114... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-40114 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/7a40b52d4442178bee0cf1c36bc450ab951cef0f URL
- https://git.kernel.org/stable/c/9c40a68b7f97fa487e6c7e67fcf4f846a1f96692 URL
- https://git.kernel.org/stable/c/ee735aa33db16c1fb5ebccbaf84ad38f5583f3cc URL
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
6.3
Medium
Type
CWE-129Improper Validation of Array Index
Timeline
Published18 Apr 2025
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta