{"id":"CVE-2025-40112","summary":"sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nsparc: fix accurate exception reporting in copy_{from_to}_user for Niagara\n\nThe referenced commit introduced exception handlers on user-space memory\nreferences in copy_from_user and copy_to_user. These handlers return from\nthe respective function and calculate the remaining bytes left to copy\nusing the current register contents. This commit fixes a couple of bad\ncalculations and a broken epilogue in the exception handlers. This will\nprevent crashes and ensure correct return values of copy_from_user and\ncopy_to_user in the faulting case. The behaviour of memcpy stays unchanged.","modified":"2026-10-28T02:31:01.888887242Z","published":"2025-11-12T10:23:16.690Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40112.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/05440320ea3e249d5f984918f2bf51210c1a7c03"},{"type":"WEB","url":"https://git.kernel.org/stable/c/088c5098ec6d6b0396edfbf3dad3e81de8469c1c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/0b67c8fc10b13a9090340c5f8a37d308f4e1571c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/37547d8e6eba87507279ee3dfddfd9dc46335454"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7823fc4d8ab5e57f8db7806ff2530c03c166c4bb"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8cdeb5e482d3fdce7e825444b6ca3865e24c0228"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a365ee556e45f780ee322b349a06efdad0c1458f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a90ce516a73dbe087f9bf3dbf311301a58d125c6"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40112.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40112"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e"},{"fixed":"05440320ea3e249d5f984918f2bf51210c1a7c03"},{"fixed":"7823fc4d8ab5e57f8db7806ff2530c03c166c4bb"},{"fixed":"37547d8e6eba87507279ee3dfddfd9dc46335454"},{"fixed":"a365ee556e45f780ee322b349a06efdad0c1458f"},{"fixed":"8cdeb5e482d3fdce7e825444b6ca3865e24c0228"},{"fixed":"a90ce516a73dbe087f9bf3dbf311301a58d125c6"},{"fixed":"088c5098ec6d6b0396edfbf3dad3e81de8469c1c"},{"fixed":"0b67c8fc10b13a9090340c5f8a37d308f4e1571c"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4.4.34"},{"fixed":"4.5"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4.8.10"},{"fixed":"4.9"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"bfc8be6593097cb074d3912ba2f27565cfbb7d6e"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"a15859f9d8396cce7c55ccdb7e75f70f14cbc349"}]}],"versions":["v4.4.302","v4.4.301","v4.4.300","v4.4.299","v4.4.298","v4.4.297","v4.4.296","v4.4.295","v4.4.294","v4.4.293","v4.4.292","v4.4.291","v4.4.290","v4.4.289","v4.4.288","v4.4.287","v4.4.286","v4.4.285","v4.4.284","v4.4.283","v4.4.282","v4.4.281","v4.4.280","v4.4.279","v4.4.278","v4.4.277","v4.4.276","v4.4.275","v4.4.274","v4.4.273","v4.4.272","v4.4.271","v4.4.270","v4.4.269","v4.4.268","v4.4.267","v4.4.266","v4.4.265","v4.4.264","v4.4.263","v4.4.262","v4.4.261","v4.4.260","v4.4.259","v4.4.258","v4.4.257","v4.4.256","v4.4.255","v4.4.254","v4.4.253","v4.4.252","v4.4.251","v4.4.250","v4.4.249","v4.4.248","v4.4.247","v4.4.246","v4.4.245","v4.4.244","v4.4.243","v4.4.242","v4.4.241","v4.4.240","v4.4.239","v4.4.238","v4.4.237","v4.4.236","v4.4.235","v4.4.234","v4.4.233","v4.4.232","v4.4.231","v4.4.230","v4.4.229","v4.4.228","v4.4.227","v4.4.226","v4.4.225","v4.4.224","v4.4.223","v4.4.222","v4.4.221","v4.4.220","v4.4.219","v4.4.218","v4.4.217","v4.4.216","v4.4.215","v4.4.214","v4.4.213","v4.4.212","v4.4.211","v4.4.210","v4.4.209","v4.4.208","v4.4.207","v4.4.206","v4.4.205","v4.4.204","v4.4.203","v4.4.202","v4.4.201","v4.4.200","v4.4.199","v4.4.198","v4.4.197","v4.4.196","v4.4.195","v4.4.194","v4.4.193","v4.4.192","v4.4.191","v4.4.190","v4.4.189","v4.4.188","v4.4.187","v4.4.186","v4.4.185","v4.4.184","v4.4.183","v4.4.182","v4.4.181","v4.4.180","v4.4.179","v4.4.178","v4.4.177","v4.4.176","v4.4.175","v4.4.174","v4.4.173","v4.4.172","v4.4.171","v4.4.170","v4.4.169","v4.4.168","v4.4.167","v4.4.166","v4.4.165","v4.4.164","v4.4.163","v4.4.162","v4.4.161","v4.4.160","v4.4.159","v4.4.158","v4.4.157","v4.4.156","v4.4.155","v4.4.154","v4.4.153","v4.4.152","v4.4.151","v4.4.150","v4.4.149","v4.4.148","v4.4.147","v4.4.146","v4.4.145","v4.4.144","v4.4.143","v4.4.142","v4.4.141","v4.4.140","v4.4.139","v4.4.138","v4.4.137","v4.4.136","v4.4.135","v4.4.134","v4.4.133","v4.4.132","v4.4.131","v4.4.130","v4.4.129","v4.4.128","v4.4.127","v4.4.126","v4.4.125","v4.4.124","v4.4.123","v4.4.122","v4.4.121","v4.4.120","v4.4.119","v4.4.118","v4.4.117","v4.4.116","v4.4.115","v4.4.114","v4.4.113","v4.4.112","v4.4.111","v4.4.110","v4.4.109","v4.4.108","v4.4.107","v4.4.106","v4.4.105","v4.4.104","v4.4.103","v4.4.102","v4.4.101","v4.4.100","v4.4.99","v4.4.98","v4.4.97","v4.4.96","v4.4.95","v4.4.94","v4.4.93","v4.4.92","v4.4.91","v4.4.90","v4.4.89","v4.4.88","v4.4.87","v4.4.86","v4.4.85","v4.4.84","v4.4.83","v4.4.82","v4.4.81","v4.4.80","v4.4.79","v4.4.78","v4.4.77","v4.4.76","v4.4.75","v4.4.74","v4.4.73","v4.4.72","v4.4.71","v4.4.70","v4.4.69","v4.4.68","v4.4.67","v4.4.66","v4.4.65","v4.4.64","v4.4.63","v4.4.62","v4.4.61","v4.4.60","v4.4.59","v4.4.58","v4.4.57","v4.4.56","v4.4.55","v4.4.54","v4.4.53","v4.4.52","v4.4.51","v4.4.50","v4.4.49","v4.4.48","v4.4.47","v4.4.46","v4.4.45","v4.4.44","v4.4.43","v4.4.42","v4.4.41","v4.4.40","v4.4.39","v4.4.38","v4.4.37","v4.4.36","v4.4.35","v4.4.34","v4.8.17","v4.8.16","v4.8.15","v4.8.14","v4.8.13","v4.8.12","v4.8.11","v4.8.10"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40112.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"5.4.301"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.5.0"},{"fixed":"5.10.246"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.195"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.156"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.112"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.53"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.17.3"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40112.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}