CVE-2025-40074: linux
CVSS: 9.8v3.1CriticalDeferred
AliasesUBUNTU-CVE-2025-40074DEBIAN-CVE-2025-40074
Published 28-10-2025Last modified 03-10-2026
Vulnerability summary
CVE-2025-40074 is a critical (CVSS 9.8) vulnerability in linux. EPSS estimates a 0.46% chance of exploitation in the next 30 days, higher than 38.9% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)EPSS score
0.46%
0%100%
Low · +0.04 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 23 · Related 23OPENSUSE-SU-2025:15702-1OPENSUSE-SU-2025:20172-1OPENSUSE-SU-2026:10301-1SUSE-SU-2025:4393-1SUSE-SU-2025:4422-1SUSE-SU-2025:4505-1SUSE-SU-2025:4516-1SUSE-SU-2025:4517-1SUSE-SU-2025:4521-1SUSE-SU-2026:20012-1SUSE-SU-2026:20015-1SUSE-SU-2026:20021-1SUSE-SU-2026:20039-1SUSE-SU-2026:20059-1SUSE-SU-2026:20473-1SUSE-SU-2026:20496-1SUSE-SU-2026:20562-1USN-8029-1USN-8029-2USN-8029-3USN-8030-1USN-8048-1USN-8781-1
Timeline
- 28-10-2025PublishedVulnerability first disclosed.
- 03-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: ipv4: start using dst_dev_rcu() Change icmpv4_xrlim_allow(), ip_defrag() to prevent possible UAF. Change ipmr_prepare_xmit(), ipmr_queue_fwd_xmit(), ip_mr_output(), ipv4_neigh_lookup() to use lockdep enabled dst_dev_rcu().
CVSS metrics
5 scores · 4 sources · 2 versionsHigh 7.3Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NSourcesSingle source
Critical 9.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.46%
Chance of exploitation in the next 30 days
Percentile
39%
Versus all other CVEs
30-day change
+0.04 pp
From 0.43% on 21-09-2026
21-09-202621-10-2026
EPSS score0.46%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu155 products
- linuxAll versions (No fix recorded) | < 6.17.0-14.14
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 6.17.0-1007.7
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linuxAll versions (No fix recorded) | < 6.1.190-1 | < 6.12.107-1 | < 6.17.6-1
- linux-6.12< 6.12.107-1~deb12u1
Linux1 product
- linux≥ 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36, < 864155c164654110f68a17a63bd0339754790d67 | ≥ 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36, < e150f273cd8ed34ebc6d03758aad95c12fc58337 | ≥ 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36, < 684efb2c86c887685f9aa65e1a21b3df6c1f822d | ≥ 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36, < 923e0734c386984d45de508528a7a7ad91d791cc | ≥ 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36, < 6ad8de3cefdb6ffa6708b21c567df0dbf82c43a8 | 4.13
3 vendors · 158 products
