CVE-2025-40291 | Linux Kernel up to 6.17.7 io_uring io_estimate_bvec_size privilege escalation

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.17.7. This issue affects the function io_estimate_bvec_size of the component io_uring. The manipulation results in privilege escalation.

This vulnerability is cataloged as CVE-2025-40291. The attack must originate from the local network. There is no exploit available.

It is advisable to upgrade the affected component.