CNNVD-202512-538 Information

Dec 04, 2025 cve

CNNVD ID

CNNVD-202512-538

CVE-2025-40240

  • CNNVD Published: 2025-12-04

Description (Chinese)

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于SCTP处理缺失数据缓冲区时可能解引用空指针。

Description (English)

Linux Kernel is the kernel used by Linux, the Open Source Operator System of the Linux Foundation of the United States. There is a security loophole in Linux Kernel, which stems from the possibility that the empty pointer may be removed when SCTP processes missing data buffer zones.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Linux

Published

2025-12-04

Last Modified

2026-02-24

References

https://git.kernel.org/stable/c/61cda2777b07d27459f5cac5a047c3edf9c8a1a9 https://git.kernel.org/stable/c/08165c296597075763130919f2aae59b5822f016 https://git.kernel.org/stable/c/cb9055ba30306ede4ad920002233d0659982f1cb https://git.kernel.org/stable/c/7a832b0f99be19df608cb75c023f8027b1789bd1 https://git.kernel.org/stable/c/4f6da435fb5d8a21cbf8cae5ca5a2ba0e1012b71 https://git.kernel.org/stable/c/89b465b54227c245ddc7cc9ed822231af21123ef https://git.kernel.org/stable/c/03e80a4b04ef1fb2c61dd63216ab8d3a5dcb196f https://git.kernel.org/stable/c/441f0647f7673e0e64d4910ef61a5fb8f16bfb82 https://vigilance.fr/vulnerability/Linux-kernel-multiple-vulnerabilities-dated-04-12-2025-48989 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40240

Patch

https://www.kernel.org/

Share on: