Linux kernel maintainers have pushed a small but important hardening fix for CVE-2025-40217 — a validation shortcoming in the pidfs ioctl handling — closing a class of type‑confusion and buffer‑size risks by introducing stricter checks for extensible ioctls used by PID file descriptor helpers...