CVE-2025-40236 — Linux vulnerability
15 documents6 sources
Severity
—N/A
No vectorEPSS
0.0%
top 89.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 4
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: zero unused hash fields
When GSO tunnel is negotiated virtio_net_hdr_tnl_from_skb() tries to
initialize the tunnel metadata but forget to zero unused rxhash
fields. This may leak information to another side. Fixing this by
zeroing the unused hash fields.
Affected Packages5 packages
▶CVEListV5linux/linuxa2fb4bc4e2a6a031683910d85b278c1d25ae5420 — b625d231c66a6041e98817ffc944bf6e4c45b2e3+2