CVE-2025-40175 — Linux vulnerability
15 documents6 sources
Severity
—N/A
No vectorEPSS
0.0%
top 94.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
idpf: cleanup remaining SKBs in PTP flows
When the driver requests Tx timestamp value, one of the first steps is
to clone SKB using skb_get. It increases the reference counter for that
SKB to prevent unexpected freeing by another component.
However, there may be a case where the index is requested, SKB is
assigned and never consumed by PTP flows - for example due to reset during
running PTP apps.
Add a check in release timest…
Affected Packages5 packages
▶CVEListV5linux/linux4901e83a94ef0a8baf27916f31daf59b0a68547f — 2c84e91ef831d4fedb0b94670b3cfd1cc5f966a5+2