CVE-2025-40279
- Source
- https://cve.org/CVERecord?id=CVE-2025-40279
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40279.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-40279
- Downstream
- Related
- Published
- 2025-12-06T21:51:03.010Z
- Modified
- 2026-03-28T17:44:46.909981470Z
- Summary
- net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: sched: actconnmark: initialize struct tcife to fix kernel leak
In tcfconnmarkdump(), the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nla_put() copies the entire structure into a netlink message, these uninitialized bytes leaked to userspace.
Initialize the structure with memset before assigning its fields to ensure all members and padding are cleared prior to beign copied.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40279.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/218b67c8c8246d47a2a7910eae80abe4861fe2b7
- https://git.kernel.org/stable/c/25837889ec062f2b7618142cd80253dff3da5343
- https://git.kernel.org/stable/c/31e4aa93e2e5b5647fc235b0f6ee329646878f9e
- https://git.kernel.org/stable/c/51cb05d4fd632596816ba44e882e84db9fb28a7e
- https://git.kernel.org/stable/c/62b656e43eaeae445a39cd8021a4f47065af4389
- https://git.kernel.org/stable/c/73cc56c608c209d3d666cc571293b090a471da70
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40279.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-40279
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced22a5dc0e5e3e8fef804230cd73ed7b0afd4c7baeFixed218b67c8c8246d47a2a7910eae80abe4861fe2b7Fixed73cc56c608c209d3d666cc571293b090a471da70Fixed31e4aa93e2e5b5647fc235b0f6ee329646878f9eFixed51cb05d4fd632596816ba44e882e84db9fb28a7eFixed25837889ec062f2b7618142cd80253dff3da5343Fixed62b656e43eaeae445a39cd8021a4f47065af4389