CVE-2025-40158
HIGH
MEDIUM
Priority: 0.04
BB Relevance:
66/100
Published: 2025-11-12
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Network
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_output() Use RCU in ip6_output() in order to use dst_dev_rcu() to prevent possible UAF. We can remove rcu_read_lock()/rcu_read_unlock() pairs from ip6_finish_output2().
Affected Software (6)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 4549ce1057363c8dc072f40c6aa591c279eafed2 |
| Linux | Linux | 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 423895685f367b5a0a956bd14b02df0192bded4c |
| Linux | Linux | 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 92803b826e40e49a5e8a6e208f4b4574e9d19426 |
| Linux | Linux | 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 0393f85c3241c19ba8550f04a812e7d19f6b3082 |
| Linux | Linux | 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 11709573cc4e48dc34c80fc7ab9ce5b159e29695 |
| Linux | Linux | 4.13 |