CVE-2025-40000 — Expired Pointer Dereference in Linux

CWE-825 — Expired Pointer Dereference24 documents7 sources
Severity
3.2LOWOSV
No vector
EPSS
0.0%
top 92.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LinuxLinux KernelDebian Linux+1 more
Timeline
PublishedOct 15
Latest updateApr 9

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() There is a bug observed when rtw89_core_tx_kick_off_and_wait() tries to access already freed skb_data: BUG: KFENCE: use-after-free write in rtw89_core_tx_kick_off_and_wait drivers/net/wireless/realtek/rtw89/core.c:1110 CPU: 6 UID: 0 PID: 41377 Comm: kworker/u64:24 Not tainted 6.17.0-rc1+ #1 PREEMPT(lazy) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)…

Affected Packages6 packages

▶Linuxlinux/linux_kernel6.4.0 — 6.12.52+2
▶Debianlinux/linux_kernel< 6.12.57-1+1
▶Ubuntulinux/linux_kernel< 6.8.0-106.106
▶CVEListV5linux/linux1ae5ca615285d5d4f72d1de464716d85dffef19f — 895cccf639ac015f3d5f993218cf098db82ac145+4

🔴Vulnerability Details

11
OSV
linux-raspi, linux-raspi-realtime vulnerabilities↗2026-04-01
▶
OSV
linux-azure-6.8 vulnerabilities↗2026-03-25
▶
OSV
linux-azure vulnerabilities↗2026-03-25
▶
OSV
linux-aws-6.8 vulnerabilities↗2026-03-23
▶
OSV
linux-realtime, linux-realtime-6.8 vulnerabilities↗2026-03-17
▶

📋Vendor Advisories

12
Ubuntu
Linux kernel (Azure FIPS) vulnerabilities↗2026-04-09
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2026-04-01
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-03-25
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-03-25
▶
Ubuntu
Linux kernel (AWS) vulnerabilities↗2026-03-23
▶
CVE-2025-40000 — Expired Pointer Dereference in Linux | cvebase