Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-40170

net: use dst_dev_rcu() in sk_setup_caps()

Description

In the Linux kernel, the following vulnerability has been resolved: net: use dst_dev_rcu() in sk_setup_caps() Use RCU to protect accesses to dst->dev from sk_setup_caps() and sk_dst_gso_max_size(). Also use dst_dev_rcu() in ip6_dst_mtu_maybe_forward(), and ip_dst_mtu_maybe_forward(). ip4_dst_hoplimit() can use dst_dev_net_rcu().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to < 13b0e14bfa7e6d506d8d6426b9e6d7feef01ded3affected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to < 9f22b5f7f1a32f8bbcc82bf34e34ea63523fcd02affected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to < 5d1be493d1110c9e720b4c51a6e587bb2fb4ac12affected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to < a805729c0091073d8f0415cfa96c7acd1bc17a48affected
  • 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to < 99a2ace61b211b0be861b07fbaa062fca4b58879affected

Linux Linux

Default version status: affected

  • 4.13affected
  • 0 to < 4.13unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.64 to ≤ 6.12.*unaffected
  • 6.17.3 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References