In the Linux kernel, the following vulnerability has been resolved:
ipv6: use RCU in ip6_output()
Use RCU in ip6output() in order to use dstdev_rcu() to prevent possible UAF.
We can remove rcureadlock()/rcureadunlock() pairs from ip6finishoutput2().
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40158.json"
}