CVE-2025-40158 is a high-severity vulnerability in the Linux kernel involving the IPv6 output function ip6_output(). The flaw stemmed from improper synchronization that could lead to a use-after-free condition when accessing network device data structures. The fix involved using RCU (Read-Copy-Update) mechanisms in ip6_output() to safely access dst_dev_rcu(), eliminating the risk of use-after-free. Additionally, redundant rcu_read_lock()/rcu_read_unlock() calls were removed from ip6_finish_output2(). This vulnerability has been resolved in the Linux kernel source, though no specific affected versions or patch links are provided in the data.

The vulnerability could allow an attacker to exploit a use-after-free condition in the IPv6 output path of the Linux kernel, potentially leading to arbitrary code execution or kernel crashes, impacting confidentiality, integrity, and availability of affected systems. The CVSS vector indicates network attack vector with high complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

A fix for this vulnerability has been implemented in the Linux kernel by adopting RCU usage in ip6_output() and removing redundant RCU lock pairs. No specific patch links are provided, so users should update to the latest Linux kernel versions where this fix is included. Patch status is not yet confirmed from vendor advisories; users should monitor official Linux kernel security advisories for the exact fixed versions and apply updates accordingly.