CVE-2025-40135

Опубликовано: 12 нояб. 2025

Источник: debian

Описание

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
linux	fixed	6.17.6-1		package

Примечания

https://git.kernel.org/linus/9085e56501d93af9f2d7bd16f7fcfacdde47b99c (6.18-rc1)

Связанные уязвимости

CVE-2025-40135

CVSS3: 8.1

ubuntu

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.

CVE-2025-40135

CVSS3: 7

redhat

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.

CVE-2025-40135

CVSS3: 8.1

nvd

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.

CVE-2025-40135

CVSS3: 8.4

msrc

9 месяцев назад

ipv6: use RCU in ip6_xmit()

GHSA-q28q-889g-6rx2

CVSS3: 8.1

github

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.