A small, surgical change to the Linux kernel’s ARM SPE perf driver closed CVE-2025-40081 — a numeric overflow in the PERF_IDX2OFF macro that could miscompute buffer offsets for large AUX buffers (>= 2 GiB) and lead to kernel instability. The fix casts the buffer pages count to an unsigned long...