Search: CVE-2025-40133

1 threat

Search: CVE-2025-40133
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	8.1	EPSS 0.5%	CVE-2025-40133linux-hwe-edge · Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (CVE-2025-40133) Medium8.1EPSS 0.5%2025-11-12GCVE DatabaseCVE-2025-40133 In the Linux kernel, the following vulnerability has been resolved: mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). mptcp_active_enable() is called from subflow_finish_connect(), which is icsk->icsk_af_ops->sk_rx_dst_set() and it's not always under RCU. Using sk_dst_get(sk)->dev could trigger UAF. Let's use __sk_dst_get() and dst_dev_rcu(). EPSS 0.5%Vulnerability #ghsa-q2wv-3qj8-h2hq	GCVE Database	2025-11-12

Showing 1–1 of 1 result