CVE-2025-40135: ipv6: use RCU in ip6_xmit()
In the Linux kernel, the following vulnerability has been resolved:
ipv6: use RCU in ip6xmit()
Use RCU in ip6xmit() in order to use dstdevrcu() to prevent possible UAF.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40135?
CVE-2025-40135 is classified as a medium severity vulnerability due to its potential risk of use-after-free conditions in the Linux kernel.
How do I fix CVE-2025-40135?
To fix CVE-2025-40135, update to the latest patched version of the Linux kernel that addresses the vulnerability.
What impact does CVE-2025-40135 have on Linux systems?
CVE-2025-40135 may lead to system instability or exploitation if an attacker can leverage the use-after-free issue.
Is my Linux system vulnerable to CVE-2025-40135?
If you are running an unpatched version of the Linux kernel that is affected by CVE-2025-40135, your system is vulnerable.
When was CVE-2025-40135 disclosed?
CVE-2025-40135 was disclosed as part of a series of updates to the Linux kernel addressing various vulnerabilities.