Search: CVE-2025-40158

CVE-2025-40158 is a high-severity vulnerability in the Linux kernel's IPv6 implementation. It involves improper use of Read-Copy-Update (RCU) mechanisms in the ip6_output() function, which could lead to a use-after-free (UAF) condition. The issue was addressed by properly using RCU in ip6_output() to safely access destination device pointers, removing redundant RCU lock pairs from ip6_finish_output2().