Riskcovery

CVE-2025-40075

tcp_metrics: use dst_dev_net_rcu()

State
Published
Severity
8.1 High
Published
Oct 28, 2025
Updated
Oct 30, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: use dst_dev_net_rcu()

Replace three dst_dev() with a lockdep enabled helper.

Scores

CVSSScoreVectorSource
3.18.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 23261817e955ebeb91d7c5c667d09fa415eb88b4Affected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 7012bea5622396b37566fbdc059f7c6a6c279d74Affected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 4b89397807eb04986427c4786d065e9442834ad4Affected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 07613a95326ebad2d1b88d883cd72546025a4f3eAffected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 50c127a69cd6285300931853b352a1918cfa180fAffected
LinuxLinux
  • 4.13Affected
  • before 4.13Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.63 through 6.12.*Not affected
  • 6.17.3 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.