CVE-2025-40020
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix shift-out-of-bounds issue Explicitly uses a 64-bit constant when the number of bits used for its shifting is 32 (which is the case for PC CAN FD interfaces supported by this driver). [mkl: update subject, apply manually]
Severity
Not scored
CVSS score
Not available
Vulnerability status
Deferred
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2025-10-24 13:15:47.107000
Last modified
2026-10-19 21:10:00.160000
View original CVE JSON
{
"id": "CVE-2025-40020",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-10-24T13:15:47.107",
"lastModified": "2026-10-19T21:10:00.160",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: peak_usb: fix shift-out-of-bounds issue\n\nExplicitly uses a 64-bit constant when the number of bits used for its\nshifting is 32 (which is the case for PC CAN FD interfaces supported by\nthis driver).\n\n[mkl: update subject, apply manually]"
},
{
"lang": "es",
"value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncan: peak_usb: soluciona problema de desplazamiento fuera de límites\n\nUtiliza explícitamente una constante de 64 bits cuando el número de bits utilizados para su desplazamiento es 32 (lo cual es el caso para las interfaces PC CAN FD soportadas por este controlador).\n\n[mkl: actualizar asunto, aplicar manualmente]"
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"drivers/net/can/usb/peak_usb/pcan_usb_core.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d",
"lessThan": "572c656802781cc57f4a3231eefa83547e75ed78",
"versionType": "git",
"status": "affected"
},
{
"version": "bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d",
"lessThan": "61b1dd4c614935169d12bdecc26906e37b508618",
"versionType": "git",
"status": "affected"
},
{
"version": "bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d",
"lessThan": "48822a59ecc47d353400d38b1941d3ae7591ffff",
"versionType": "git",
"status": "affected"
},
{
"version": "bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d",
"lessThan": "176c81cbf9c4e348610a421aad800087c0401f60",
"versionType": "git",
"status": "affected"
},
{
"version": "bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d",
"lessThan": "17edec1830e48c0becd61642d0e40bc753243b16",
"versionType": "git",
"status": "affected"
},
{
"version": "bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d",
"lessThan": "eb79ed970670344380e77d62f8188e8015648d94",
"versionType": "git",
"status": "affected"
},
{
"version": "bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d",
"lessThan": "394c58017e5f41043584c345106cae16a4613710",
"versionType": "git",
"status": "affected"
},
{
"version": "bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d",
"lessThan": "c443be70aaee42c2d1d251e0329e0a69dd96ae54",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"drivers/net/can/usb/peak_usb/pcan_usb_core.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "3.4",
"status": "affected"
},
{
"version": "0",
"lessThan": "3.4",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.4.300",
"lessThanOrEqual": "5.4.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.245",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.194",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.155",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.109",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.50",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.16.10",
"lessThanOrEqual": "6.16.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.17",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/176c81cbf9c4e348610a421aad800087c0401f60",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/17edec1830e48c0becd61642d0e40bc753243b16",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/394c58017e5f41043584c345106cae16a4613710",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/48822a59ecc47d353400d38b1941d3ae7591ffff",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/572c656802781cc57f4a3231eefa83547e75ed78",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/61b1dd4c614935169d12bdecc26906e37b508618",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/c443be70aaee42c2d1d251e0329e0a69dd96ae54",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/eb79ed970670344380e77d62f8188e8015648d94",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}