CVE-2025-40170
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/11/2025
Last modified:
12/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: use dst_dev_rcu() in sk_setup_caps()<br />
<br />
Use RCU to protect accesses to dst->dev from sk_setup_caps()<br />
and sk_dst_gso_max_size().<br />
<br />
Also use dst_dev_rcu() in ip6_dst_mtu_maybe_forward(),<br />
and ip_dst_mtu_maybe_forward().<br />
<br />
ip4_dst_hoplimit() can use dst_dev_net_rcu().