CVE-2025-40080

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-40080
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40080.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-40080
Downstream
Related
Published
2025-10-28T11:48:44.796Z
Modified
2026-03-12T03:54:32.124534Z
Summary
nbd: restrict sockets to TCP and UDP
Details

In the Linux kernel, the following vulnerability has been resolved:

nbd: restrict sockets to TCP and UDP

Recently, syzbot started to abuse NBD with all kinds of sockets.

Commit cf1b2326b734 ("nbd: verify socket is supported during setup") made sure the socket supported a shutdown() method.

Explicitely accept TCP and UNIX stream sockets.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40080.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
cf1b2326b734896734c6e167e41766f9cee7686a
Fixed
c365e8f20f4201d873a70385bd919f0fb531e960
Fixed
4f9e6ff6319dbcebea64b50af0304cf0ad7e97e7
Fixed
37ad11f20e164c23ce827dd455b42c0fdd29685c
Fixed
808e2335bc1cf2293b9e36ccc94c267c81509c71
Fixed
9f7c02e031570e8291a63162c6c046dc15ff85b0
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4df728651b8a99693c69962d8e5a5b9e5a3bbcc7
Last affected
083322455c67d278c56a66b73f1221f004ee600a
Last affected
4fa1cbd587ef967812f9d9f6ce46ec1dead7502c

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40080.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.4.0
Fixed
6.1.156
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.112
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.53
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40080.json"