CVE-2025-40256

🗓️ 04 Dec 2025 16:08:17Reported by LinuxType

Fix xfrm: delete fallback tunnel on destroy for states never inserted to prevent tunnel leaks.

Reporter	Title	Published	Views	Family All 446
ATTACKERKB	CVE-2025-40256	4 Dec 202516:08	–	attackerkb
AstraLinux	Astra Linux - уязвимость в linux-5.10	20 May 202605:53	–	astralinux
CNNVD	Linux kernel 安全漏洞	4 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-40256 xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added	4 Dec 202516:08	–	cvelist
Debian CVE	CVE-2025-40256	4 Dec 202516:08	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	27 Feb 202600:00	–	oraclelinux
Oracle linux	Unbreakable Enterprise kernel security update	2 Mar 202600:00	–	oraclelinux
Oracle linux	Unbreakable Enterprise kernel security update	10 Mar 202600:00	–	oraclelinux
Oracle linux	Unbreakable Enterprise kernel security update	15 Apr 202600:00	–	oraclelinux
EUVD	EUVD-2025-201201	4 Dec 202516:08	–	euvd

Vulners

CNA

Node

linux linux_kernelRange6.16–6.17.10

linux linux_kernelRange6.18.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/xfrm/xfrm_state.c"
    ],
    "versions": [
      {
        "version": "1b28a7fae0128fa140a7dccd995182ff6cd1c67b",
        "lessThan": "57b72d74d4651dc19d046308a8304eb9abfe66ac",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4b2c17d0f9be8b58bb30468bc81a4b61c985b04e",
        "lessThan": "1dad653643f28ccc89be93f9440b8804cded85b2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0da961fa46da1b37ef868d9b603bd202136f8f8e",
        "lessThan": "64441724387b4ac92f67ef51caaaeffe99c950d1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d0e0d1097118461463b76562c7ebaabaa5b90b13",
        "lessThan": "763e5c351206c1e4d910db4a1159053f6263689c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dc3636912d41770466543623cb76e7b88fdb42c7",
        "lessThan": "f7d879c19d306512c2e260f37e8a3e5c85e37c50",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b441cf3f8c4b8576639d20c8eb4aa32917602ecd",
        "lessThan": "d6fe5c740c573af10943b8353992e1325cdb2715",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b441cf3f8c4b8576639d20c8eb4aa32917602ecd",
        "lessThan": "10deb69864840ccf96b00ac2ab3a2055c0c04721",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/xfrm/xfrm_state.c"
    ],
    "versions": [
      {
        "version": "6.16",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.16",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.17.10",
        "lessThanOrEqual": "6.17.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/f7d879c19d306512c2e260f37e8a3e5c85e37c50
git	www.git.kernel.org/stable/c/d6fe5c740c573af10943b8353992e1325cdb2715
git	www.git.kernel.org/stable/c/10deb69864840ccf96b00ac2ab3a2055c0c04721
git	www.git.kernel.org/stable/c/1dad653643f28ccc89be93f9440b8804cded85b2
git	www.git.kernel.org/stable/c/57b72d74d4651dc19d046308a8304eb9abfe66ac
git	www.git.kernel.org/stable/c/64441724387b4ac92f67ef51caaaeffe99c950d1
git	www.git.kernel.org/stable/c/763e5c351206c1e4d910db4a1159053f6263689c

11 May 2026 21:45Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.0004