CVE-2025-40170

net: use dst_dev_rcu() in sk_setup_caps()

State: Published
Severity: 7.8 High
Published: Nov 12, 2025
Updated: Oct 30, 2026
Reserved: Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: use dst_dev_rcu() in sk_setup_caps()

Use RCU to protect accesses to dst->dev from sk_setup_caps() and sk_dst_gso_max_size().

Also use dst_dev_rcu() in ip6_dst_mtu_maybe_forward(), and ip_dst_mtu_maybe_forward().

ip4_dst_hoplimit() can use dst_dev_net_rcu().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 13b0e14bfa7e6d506d8d6426b9e6d7feef01ded3Affected 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 9f22b5f7f1a32f8bbcc82bf34e34ea63523fcd02Affected 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 5d1be493d1110c9e720b4c51a6e587bb2fb4ac12Affected 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before a805729c0091073d8f0415cfa96c7acd1bc17a48Affected 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 99a2ace61b211b0be861b07fbaa062fca4b58879Affected
LinuxLinux	4.13Affected before 4.13Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.64 through 6.12.Not affected 6.17.3 through 6.17.Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 13b0e14bfa7e6d506d8d6426b9e6d7feef01ded3Affected
4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 9f22b5f7f1a32f8bbcc82bf34e34ea63523fcd02Affected
4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 5d1be493d1110c9e720b4c51a6e587bb2fb4ac12Affected
4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before a805729c0091073d8f0415cfa96c7acd1bc17a48Affected
4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 99a2ace61b211b0be861b07fbaa062fca4b58879Affected

LinuxLinux

4.13Affected
before 4.13Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.64 through 6.12.*Not affected
6.17.3 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.