CVE-2025-40139

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-40139

In the Linux kernel, the following vulnerability has been resolved: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). smc_clc_prfx_set() is called during connect() and not under RCU nor RTNL. Using sk_dst_get(sk)->dev could trigger UAF. Let's use __sk_dst_get() and dev_dst_rcu() under rcu_read_lock() after kernel_getsockname(). Note that the returned value of smc_clc_prfx_set() is not used in the caller. While at it, we change the 1st arg of smc_clc_prfx_set[46]_rcu() not to touch dst there.

Published Nov 18, 2025

https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40139-a030@gregkh/

CVSS ScoreMedium

6.0


rpm	kernel	4.18.0-147.0.2.el8_1
rpm	kernel	4.18.0-147.0.3.el8_1
rpm	kernel	4.18.0-147.3.1.el8_1
rpm	kernel	4.18.0-147.5.1.el8_1
rpm	kernel	4.18.0-147.8.1.el8_1
rpm	kernel	4.18.0-147.el8
rpm	kernel	4.18.0-193.1.2.el8_2
rpm	kernel	4.18.0-193.13.2.el8_2
rpm	kernel	4.18.0-193.14.3.el8_2
rpm	kernel	4.18.0-193.19.1.el8_2
rpm	kernel	4.18.0-193.28.1.el8_2
rpm	kernel	4.18.0-193.6.3.el8_2
rpm	kernel	4.18.0-193.el8
rpm	kernel	4.18.0-240.1.1.el8_3
rpm	kernel	4.18.0-240.10.1.el8_3
rpm	kernel	4.18.0-240.15.1.el8_3
rpm	kernel	4.18.0-240.22.1.el8_3
rpm	kernel	4.18.0-240.8.1.el8_3
rpm	kernel	4.18.0-240.el8
rpm	kernel	4.18.0-293.el8
rpm	kernel	4.18.0-305.10.2.el8_4
rpm	kernel	4.18.0-305.12.1.el8_4
rpm	kernel	4.18.0-305.17.1.el8_4
rpm	kernel	4.18.0-305.19.1.el8_4
rpm	kernel	4.18.0-305.25.1.el8_4
rpm	kernel	4.18.0-305.3.1.el8_4
rpm	kernel	4.18.0-305.7.1.el8_4
rpm	kernel	4.18.0-305.el8
rpm	kernel	4.18.0-348.12.2.el8_5
rpm	kernel	4.18.0-348.2.1.el8_5
rpm	kernel	4.18.0-348.20.1.el8_5
rpm	kernel	4.18.0-348.23.1.el8_5
rpm	kernel	4.18.0-348.7.1.el8_5
rpm	kernel	4.18.0-348.el8
rpm	kernel	4.18.0-372.13.1.0.1.el8_6
rpm	kernel	4.18.0-372.13.1.0.2.el8_6
rpm	kernel	4.18.0-372.16.1.0.1.el8_6
rpm	kernel	4.18.0-372.16.1.0.2.el8_6
rpm	kernel	4.18.0-372.19.1.0.1.el8_6
rpm	kernel	4.18.0-372.19.1.0.2.el8_6
rpm	kernel	4.18.0-372.26.1.0.1.el8_6
rpm	kernel	4.18.0-372.26.1.0.2.el8_6
rpm	kernel	4.18.0-372.32.1.0.1.el8_6
rpm	kernel	4.18.0-372.32.1.0.2.el8_6
rpm	kernel	4.18.0-372.9.1.0.2.el8
rpm	kernel	4.18.0-372.9.1.el8
rpm	kernel	4.18.0-425.10.1.0.1.el8_7
rpm	kernel	4.18.0-425.10.1.el8_7
rpm	kernel	4.18.0-425.13.1.0.1.el8_7
rpm	kernel	4.18.0-425.13.1.el8_7

Ecosystem	Package	Version

CVE-2025-40139 | Components Impacted | Sonatype Guide | Sonatype Guide

Find vulnerabilities. Fix fast with AI.

CVE-2025-40139