Back to search
CVE-2025-40168
Published: Nov 12, 2025
Modified: May 11, 2026
PUBLISHED
Description
In the Linux kernel, the following vulnerability has been resolved: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). smc_clc_prfx_match() is called from smc_listen_work() and not under RCU nor RTNL. Using sk_dst_get(sk)->dev could trigger UAF. Let's use __sk_dst_get() and dst_dev_rcu(). Note that the returned value of smc_clc_prfx_match() is not used in the caller.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected a046d57da19f812216f393e7c535f5858f793ac3 - < d26e80f7fb62d77757b67a1b94e4ac756bc9c658affected a046d57da19f812216f393e7c535f5858f793ac3 - < 235f81045c008169cc4e1955b4a64e118eebe61b |
Linux | Linux | affected 4.11unaffected 0 - < 4.11unaffected 6.17.3 - <= 6.17.*unaffected 6.18 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now