Riskcovery

CVE-2025-40135

ipv6: use RCU in ip6_xmit()

State
Published
Severity
8.1 High
Published
Nov 12, 2025
Updated
Oct 30, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: use RCU in ip6_xmit()

Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.

Scores

CVSSScoreVectorSource
3.18.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 7a228cfbb66cca49e9baf901c506364f8dfe036bAffected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before f0a54d00d2f36de40266f47c27989853e8588656Affected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before f69fec6287565fdeb61f65e700a1184352306943Affected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before bd0905e2122e3680968cd0741966983490bf2ed3Affected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before f7f9e924f23684b4b23cd9f976cceab24a968e34Affected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 9085e56501d93af9f2d7bd16f7fcfacdde47b99cAffected
LinuxLinux
  • 4.13Affected
  • before 4.13Not affected
  • 5.15.224 through 5.15.*Not affected
  • 6.1.167 through 6.1.*Not affected
  • 6.6.130 through 6.6.*Not affected
  • 6.12.78 through 6.12.*Not affected
  • 6.17.3 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.