Threats tagged 'ghsa-447q-wwcf-54f8'

A high severity vulnerability identified as CVE-2025-40075 in the Linux kernel involves the tcp_metrics component. The issue was addressed by replacing three calls to dst_dev() with a lockdep-enabled helper function dst_dev_net_rcu(). This change improves locking correctness in the kernel networking code. No affected versions are explicitly stated. There are no known exploits in the wild. The vulnerability has been resolved in the Linux kernel source, but no explicit patch links or affected version details are provided.