CVE-2025-40170

In the Linux kernel, the following vulnerability has been resolved: net: use dst_dev_rcu() in sk_setup_caps() Use RCU to protect accesses to dst->dev from sk_setup_caps() and sk_dst_gso_max_size(). Also use dst_dev_rcu() in ip6_dst_mtu_maybe_forward(), and ip_dst_mtu_maybe_forward(). ip4_dst_hoplimit() can use dst_dev_net_rcu().

Score

CVSS 3.1 7.8 High

Status

Deferred - 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2025-11-12

Last modified

2026-10-21

Affected products

• Linux Kernel (Linux)

References

• https://git.kernel.org/stable/c/9f22b5f7f1a32f8bbcc82bf34e34ea63523fcd02
• https://git.kernel.org/stable/c/5d1be493d1110c9e720b4c51a6e587bb2fb4ac12
• https://git.kernel.org/stable/c/a805729c0091073d8f0415cfa96c7acd1bc17a48
• https://git.kernel.org/stable/c/99a2ace61b211b0be861b07fbaa062fca4b58879