CVE-2025-40075

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-40075
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40075.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-40075
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
OESA (3)
openSUSE (3)
ROOT (5)
SUSE (15)
UBUNTU (1)
Related
openSUSE (3)
SUSE (15)
Published
2025-10-28T11:48:41Z
Modified
2026-10-22T10:31:56Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
tcp_metrics: use dst_dev_net_rcu()
Details

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: use dst_dev_net_rcu()

Replace three dst_dev() with a lockdep enabled helper.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40075.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36
Fixed
7012bea5622396b37566fbdc059f7c6a6c279d74
Fixed
4b89397807eb04986427c4786d065e9442834ad4
Fixed
07613a95326ebad2d1b88d883cd72546025a4f3e
Fixed
50c127a69cd6285300931853b352a1918cfa180f

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40075.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.13.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.63
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40075.json"