CVE-2025-40079

CVE-2025-40079 is a vulnerability in the Linux kernel, specifically affecting RISC-V architectures when handling BPF struct operations. It arises from improper sign extension of return values for BPF struct ops, leading to a kernel panic when a selftest (ns_bpf_qdisc) is triggered. The vulnerability is due to the kernel treating a 64-bit pointer as a 32-bit value and incorrectly sign-extending it. The vulnerability has a FAUCET Risk Score of 5/100, indicating a low severity. While a kernel panic can lead to denial of service, the attack vector and complexity are not detailed, suggesting it might require specific conditions or privileges to exploit. The impact is primarily system instability and potential unavailability. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are minimal, aligning with the typical pattern for a large percentage of CVEs.