CVE-2025-40080
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/10/2025
Última modificación:
30/10/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
nbd: restrict sockets to TCP and UDP<br />
<br />
Recently, syzbot started to abuse NBD with all kinds of sockets.<br />
<br />
Commit cf1b2326b734 ("nbd: verify socket is supported during setup")<br />
made sure the socket supported a shutdown() method.<br />
<br />
Explicitely accept TCP and UNIX stream sockets.
Impacto
Referencias a soluciones, herramientas e información
- https://git.kernel.org/stable/c/37ad11f20e164c23ce827dd455b42c0fdd29685c
- https://git.kernel.org/stable/c/4f9e6ff6319dbcebea64b50af0304cf0ad7e97e7
- https://git.kernel.org/stable/c/808e2335bc1cf2293b9e36ccc94c267c81509c71
- https://git.kernel.org/stable/c/9f7c02e031570e8291a63162c6c046dc15ff85b0
- https://git.kernel.org/stable/c/c365e8f20f4201d873a70385bd919f0fb531e960



