CVE-2025-40170
High
Description
In the Linux kernel, the following vulnerability has been resolved: net: use dst_dev_rcu() in sk_setup_caps() Use RCU to protect accesses to dst->dev from sk_setup_caps() and sk_dst_gso_max_size(). Also use dst_dev_rcu() in ip6_dst_mtu_maybe_forward(), and ip_dst_mtu_maybe_forward(). ip4_dst_hoplimit() can use dst_dev_net_rcu().
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linux13b0e14bfa7e6d506d8d6426b9e6d7feef01ded3, 9f22b5f7f1a32f8bbcc82bf34e34ea63523fcd02, 5d1be493d1110c9e720b4c51a6e587bb2fb4ac12, a805729c0091073d8f0415cfa96c7acd1bc17a48, 99a2ace61b211b0be861b07fbaa062fca4b58879 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 ≤ v < 13b0e14bfa7e6d506d8d6426b9e6d7feef01ded3, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 ≤ v < 9f22b5f7f1a32f8bbcc82bf34e34ea63523fcd02, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 ≤ v < 5d1be493d1110c9e720b4c51a6e587bb2fb4ac12, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 ≤ v < a805729c0091073d8f0415cfa96c7acd1bc17a48, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 ≤ v < 99a2ace61b211b0be861b07fbaa062fca4b58879, 4.13 | 13b0e14bfa7e6d506d8d6426b9e6d7feef01ded3, 9f22b5f7f1a32f8bbcc82bf34e34ea63523fcd02, 5d1be493d1110c9e720b4c51a6e587bb2fb4ac12, a805729c0091073d8f0415cfa96c7acd1bc17a48, 99a2ace61b211b0be861b07fbaa062fca4b58879 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.