CVE-2025-40020

In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix shift-out-of-bounds issue Explicitly uses a 64-bit constant when the number of bits used for its shifting is 32 (which is the case for PC CAN FD interfaces supported by this driver). [mkl: update subject, apply manually]

EPSS

0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-25)

Published

2025-10-24

Modified

2026-10-19

Record from

the NVD, synced 2026-10-21

References

• https://git.kernel.org/stable/c/176c81cbf9c4e348610a421aad800087c0401f60
• https://git.kernel.org/stable/c/17edec1830e48c0becd61642d0e40bc753243b16
• https://git.kernel.org/stable/c/394c58017e5f41043584c345106cae16a4613710
• https://git.kernel.org/stable/c/48822a59ecc47d353400d38b1941d3ae7591ffff
• https://git.kernel.org/stable/c/572c656802781cc57f4a3231eefa83547e75ed78

Check your stackJSON