CVE-2025-40337 — Linux vulnerability
34 documents8 sources
Severity
3.2LOWOSV
No vectorEPSS
0.0%
top 89.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: Correctly handle Rx checksum offload errors
The stmmac_rx function would previously set skb->ip_summed to
CHECKSUM_UNNECESSARY if hardware checksum offload (CoE) was enabled
and the packet was of a known IP ethertype.
However, this logic failed to check if the hardware had actually
reported a checksum error. The hardware status, indicating a header or
payload checksum failure, was being ignored at this stage. Thi…
Affected Packages6 packages
▶CVEListV5linux/linux3c20f72f9108b2fcf30ec63d8a4203736c01ccd0 — 63fbe0e6413279d5ea5842e2423e351ded547683+4