In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu()… (CVE-2025-40135)
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.
AI Analysis
Technical Summary
This Red Hat security advisory (RHSA-2026:23237) covers a set of vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9.4 and its variants. The fixes address multiple CVEs including CVE-2025-40135, CVE-2025-40158, CVE-2025-40170, CVE-2025-68724, CVE-2025-71089, CVE-2026-23216, CVE-2026-23392, CVE-2026-31685, CVE-2026-31709, CVE-2026-43037, CVE-2026-43038, and CVE-2026-43110. The vulnerabilities involve kernel networking, IPv6, crypto key generation, IOMMU configuration, SCSI target use-after-free, netfilter flowtable handling, MAC header validation, IPv6 tunnel error handling, SMB client DACL validation, and WiFi driver index validation. The advisory provides updated kernel packages to address these issues and requires a system reboot for the update to take effect.
Potential Impact
The vulnerabilities fixed by this advisory affect the Linux kernel core components, potentially allowing attackers to cause use-after-free conditions, integer overflows, improper validation, and other memory corruption issues. These could lead to system instability, denial of service, or privilege escalation if exploited. The advisory rates the overall security impact as Important (high severity). There are no known exploits in the wild at the time of publication.
Mitigation Recommendations
Red Hat has released updated kernel packages that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.4 variants should apply the provided kernel updates as soon as possible and reboot their systems to ensure the fixes take effect. For detailed update instructions, refer to Red Hat's official advisory and documentation. No additional mitigations are specified beyond applying the official patches and rebooting.
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu()… (CVE-2025-40135)
Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.
CVSS v3.1
Score 8.1high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory (RHSA-2026:23237) covers a set of vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9.4 and its variants. The fixes address multiple CVEs including CVE-2025-40135, CVE-2025-40158, CVE-2025-40170, CVE-2025-68724, CVE-2025-71089, CVE-2026-23216, CVE-2026-23392, CVE-2026-31685, CVE-2026-31709, CVE-2026-43037, CVE-2026-43038, and CVE-2026-43110. The vulnerabilities involve kernel networking, IPv6, crypto key generation, IOMMU configuration, SCSI target use-after-free, netfilter flowtable handling, MAC header validation, IPv6 tunnel error handling, SMB client DACL validation, and WiFi driver index validation. The advisory provides updated kernel packages to address these issues and requires a system reboot for the update to take effect.
Potential Impact
The vulnerabilities fixed by this advisory affect the Linux kernel core components, potentially allowing attackers to cause use-after-free conditions, integer overflows, improper validation, and other memory corruption issues. These could lead to system instability, denial of service, or privilege escalation if exploited. The advisory rates the overall security impact as Important (high severity). There are no known exploits in the wild at the time of publication.
Mitigation Recommendations
Red Hat has released updated kernel packages that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.4 variants should apply the provided kernel updates as soon as possible and reboot their systems to ensure the fixes take effect. For detailed update instructions, refer to Red Hat's official advisory and documentation. No additional mitigations are specified beyond applying the official patches and rebooting.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:23237
- Cve Count
- 12
- Additional Cves
- ["CVE-2025-40158","CVE-2025-40170","CVE-2025-68724","CVE-2025-71089","CVE-2026-23216","CVE-2026-23392","CVE-2026-31685","CVE-2026-31709","CVE-2026-43037","CVE-2026-43038","CVE-2026-43110"]
- Cvss Version
- 3.1
Threat ID: 6a23404ee29bf47b50c7480e
Added to database: 06/05/2026, 21:31:58 UTC
Last enriched: 07/14/2026, 10:20:31 UTC
Last updated: 08/01/2026, 07:17:56 UTC
Views: 110
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.