The Linux kernel vulnerability CVE-2025-40050 involves the BPF verifier's check_alu_op() function, which previously performed scalar adjustments unconditionally for BPF_NEG operations. When the destination register is a pointer, these adjustments are unnecessary and may cause incorrect behavior. The patch adds a conditional check to skip scalar adjustments if the destination register contains a pointer, correcting the verifier logic. This fix is included in Linux kernel versions starting from 6.17.0 and various other patched versions listed. The vulnerability affects multiple kernel subsystems and architectures as detailed in the Ubuntu advisories. The kernel update requires a reboot and recompilation of third-party kernel modules due to ABI changes.

An attacker with high privileges could exploit this vulnerability to cause incorrect behavior in the BPF verifier, potentially leading to system compromise. The vulnerability affects the integrity and availability of the system by allowing incorrect verifier logic to be applied. The severity is rated high, indicating significant risk if exploited. No known exploits in the wild have been reported at this time.

A patch is available and should be applied by updating to the fixed Linux kernel versions (6.17.0-14.14 and later, or the specific patched versions listed in the advisory). After updating, a system reboot is required to apply changes. Due to an ABI change, all third-party kernel modules must be recompiled and reinstalled. Standard system upgrades will typically handle this automatically unless kernel metapackages have been manually removed. Users should follow vendor instructions for updating and recompiling kernel modules.