CVE-2025-40158

N/A

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_output() Use RCU in ip6_output() in order to use dst_dev_rcu() to prevent possible UAF. We can remove rcu_read_lock()/rcu_read_unlock() pairs from ip6_finish_output2().

CVE Details

CVSS v3.1 ScoreN/A

Published11/12/2025

Last Modified11/12/2025

Sourcenvd

Honeypot Sightings0

References

https://git.kernel.org/stable/c/0393f85c3241c19ba8550f04a812e7d19f6b3082(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/11709573cc4e48dc34c80fc7ab9ce5b159e29695(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.