cbcvebase.
CVE-2025-40337
published 2025-12-09

CVE-2025-40337: In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmac_rx function would…

PriorityP347high8.2CVSS 3.1
AVNACLPRNUINSUCNIHAL
EPSS
0.43%
35.3th percentile
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmac_rx function would previously set skb->ip_summed to CHECKSUM_UNNECESSARY if hardware checksum offload (CoE) was enabled and the packet was of a known IP ethertype. However, this logic failed to check if the hardware had actually reported a checksum error. The hardware status, indicating a header or payload checksum failure, was being ignored at this stage. This could cause corrupt packets to be passed up the network stack as valid. This patch corrects the logic by checking the `csum_none` status flag, which is set when the hardware reports a checksum error. If this flag is set, skb->ip_summed is now correctly set to CHECKSUM_NONE, ensuring the kernel's network stack will perform its own validation and properly handle the corrupt packet.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.17.8-1 (forky)linux 6.17.8-1 (forky)
linuxlinux
linuxlinux>= 3c20f72f9108b2fcf30ec63d8a4203736c01ccd0 < 63fbe0e6413279d5ea5842e2423e351ded54768363fbe0e6413279d5ea5842e2423e351ded547683
linuxlinux>= 3c20f72f9108b2fcf30ec63d8a4203736c01ccd0 < 719fcdf29051f7471d5d433475af76219019d33d719fcdf29051f7471d5d433475af76219019d33d
linuxlinux>= 3c20f72f9108b2fcf30ec63d8a4203736c01ccd0 < 1aa319e0f12d2d761a31556b82a5852c98eb0bea1aa319e0f12d2d761a31556b82a5852c98eb0bea
linuxlinux>= 3c20f72f9108b2fcf30ec63d8a4203736c01ccd0 < ee0aace5f844ef59335148875d05bec8764e71e8ee0aace5f844ef59335148875d05bec8764e71e8
linuxlinux_kernel>= 0 < 6.12.63-16.12.63-1
linuxlinux_kernel>= 0 < 6.17.8-16.17.8-1
linuxlinux_kernel>= 0 < 6.8.0-106.1066.8.0-106.106
linuxlinux_kernel>= 0 < 6.17.0-14.146.17.0-14.14
linuxlinux_kernel>= 3.2.0 < 6.6.1176.6.117
linuxlinux_kernel>= 6.13.0 < 6.17.86.17.8
linuxlinux_kernel>= 6.7.0 < 6.12.586.12.58
msrcazl3_kernel_6.6.112.1-2_on_azure_linux_3.0
ubuntulinux-aws
ubuntulinux-oracle
ubuntulinux-xilinx

CVSS provenance

nvdv3.18.2HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
osv3.2LOW
vendor_ubuntu7.8HIGH
vendor_msrc5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.