CVE-2025-40074

CriticalCVSS 9.8

Published: 28/10/2025(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

30th percentile - higher than 30% of all known CVEs

Summary

In the IPv4 stack of the Linux kernel, functions icmpv4_xrlim_allow() and ip_defrag() were changed to prevent a potential use-after-free vulnerability. Also, dst_dev_rcu() with lockdep support was added to several other functions.

Risk Assessment

The organization may be at risk of system crashes or potential arbitrary code execution due to improper memory management in the IPv4 stack.

Recommendation

Update the Linux kernel to a version containing the fix for CVE-2025-40074.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: ipv4: start using dst_dev_rcu() Change icmpv4_xrlim_allow(), ip_defrag() to prevent possible UAF. Change ipmr_prepare_xmit(), ipmr_queue_fwd_xmit(), ip_mr_output(), ipv4_neigh_lookup() to use lockdep enabled dst_dev_rcu().