Search: CVE-2025-40176

A critical vulnerability in the Linux kernel's TLS async decryption implementation was resolved. The issue occurs when tls_strp_msg_hold fails to clone the input skb during async decryption, potentially leading to use-after-free (UAF) on the skb and unauthorized writes into userspace memory after the recv() call returns. The fix ensures that the kernel waits for all pending decryption requests if cloning fails, preventing these memory safety issues.