First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-40075

HighCVSS 8.1/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: use dst_dev_net_rcu()

Replace three dst_dev() with a lockdep enabled helper.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Linux	Linux	>= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36, < 23261817e955ebeb91d7c5c667d09fa415eb88b4; >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36, < 7012bea5622396b37566fbdc059f7c6a6c279d74; >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36, < 4b89397807eb04986427c4786d065e9442834ad4; >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36, < 07613a95326ebad2d1b88d883cd72546025a4f3e; >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36, < 50c127a69cd6285300931853b352a1918cfa180f
Linux	Linux	4.13

References

Timeline

Published: Oct 28, 2025
Last modified: Oct 30, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-40076In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-host: Pass proper IRQ domain to generic_handle_domain_irq() CVE-2025-40077In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operation Should cast typ CVE-2025-40078In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpf_sock_addr Syzkaller found a kern CVE-2025-400797.8In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Sign extend struct ops return values properly The ns_bpf_q CVE-2025-40088.8The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge sy CVE-2025-40080In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse CVE-2025-400817.8In the Linux kernel, the following vulnerability has been resolved: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() Cast nr_pages to uns CVE-2025-400827.1In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() BUG: KASAN: CVE-2025-40083In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix null-deref in agg_dequeue To prevent a potenti CVE-2025-400847.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: transport_ipc: validate payload size before reading handle hand CVE-2025-40085In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card In CVE-2025-40086In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds An

CVE-2025-40075: High severity, CVSS 8.1 | Vulnix