Riskcovery

CVE-2025-40010

afs: Fix potential null pointer dereference in afs_put_server

State
Published
Severity
Not scored
Published
Oct 20, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix potential null pointer dereference in afs_put_server

afs_put_server() accessed server->debug_id before the NULL check, which could lead to a null pointer dereference. Move the debug_id assignment, ensuring we never dereference a NULL server pointer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2757a4dc184997c66ef1de32636f73b9f21aac14 to before 7b8381f3c405b864a814d747e526e078c3ef4bc2Affected
  • 2757a4dc184997c66ef1de32636f73b9f21aac14 to before cab278cead49a547ac84c3e185f446f381303eaeAffected
  • 2757a4dc184997c66ef1de32636f73b9f21aac14 to before a13dbc5e20c7284b82afe6f08debdecf51d2ca04Affected
  • 2757a4dc184997c66ef1de32636f73b9f21aac14 to before 41782c44bb8431c43043129ae42f2ba614938479Affected
  • 2757a4dc184997c66ef1de32636f73b9f21aac14 to before 9158c6bb245113d4966df9b2ba602197a379412eAffected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.155 through 6.1.*Not affected
  • 6.6.109 through 6.6.*Not affected
  • 6.12.50 through 6.12.*Not affected
  • 6.16.10 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.