Search: CVE-2025-40204

A timing attack vulnerability was found in the Linux kernel SCTP implementation used by SUSE Linux Enterprise 16. The issue involved a non-constant-time comparison of message authentication codes (MACs), which could allow attackers to infer sensitive information through timing analysis. The vulnerability has been fixed by updating the MAC comparison to use a constant-time helper function, preventing timing attacks.