CNNVD-202512-540 Information

CNNVD ID

CNNVD-202512-540

CVE-2025-40238

  • CNNVD Published: 2025-12-04

Description (Chinese)

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于IPsec清理过程中未正确处理MPV设备事件,可能导致空指针解引用。

Description (English)

Linux Kernel is the kernel used by Linux, the Open Source Operator System of the Linux Foundation of the United States. Linux Kernel has a security loophole, which stems from the fact that the MPV equipment incident was not properly addressed during the IPsec clean-up process, which could lead to an empty pointer interpretation.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Linux

Published

2025-12-04

Last Modified

2026-02-24

References

https://git.kernel.org/stable/c/664f76be38a18c61151d0ef248c7e2f3afb4f3c7 https://git.kernel.org/stable/c/7e212cebc863c2c7a82f480446cd731721451691 https://git.kernel.org/stable/c/8956686d398eca6d324d2d164f9d2a281175a3a1 https://vigilance.fr/vulnerability/Linux-kernel-multiple-vulnerabilities-dated-04-12-2025-48989

Patch

https://www.kernel.org/

Share on: