CVE-2025-40170
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
41/100
Published: 2025-11-12
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: net: use dst_dev_rcu() in sk_setup_caps() Use RCU to protect accesses to dst->dev from sk_setup_caps() and sk_dst_gso_max_size(). Also use dst_dev_rcu() in ip6_dst_mtu_maybe_forward(), and ip_dst_mtu_maybe_forward(). ip4_dst_hoplimit() can use dst_dev_net_rcu().
Affected Software (6)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 13b0e14bfa7e6d506d8d6426b9e6d7feef01ded3 |
| Linux | Linux | 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 9f22b5f7f1a32f8bbcc82bf34e34ea63523fcd02 |
| Linux | Linux | 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 5d1be493d1110c9e720b4c51a6e587bb2fb4ac12 |
| Linux | Linux | 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < a805729c0091073d8f0415cfa96c7acd1bc17a48 |
| Linux | Linux | 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 99a2ace61b211b0be861b07fbaa062fca4b58879 |
| Linux | Linux | 4.13 |