CVE-2025-40204 — Observable Timing Discrepancy in Linux
Severity
7.8HIGHOSV
OSV5.5OSV3.2
No vectorEPSS
0.0%
top 87.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
sctp: Fix MAC comparison to be constant-time
To prevent timing attacks, MACs need to be compared in constant time.
Use the appropriate helper function for this.
Affected Packages7 packages
▶CVEListV5linux/linux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 — b93fa8dc521d00d2d44bf034fb90e0d79b036617+8