CVE-2025-40075

CVE-2025-40075 is a Linux kernel vulnerability where the tcp_metrics path used dst_dev() in three places. The fix replaces those calls with a lockdep-enabled helper function, specifically using dst_dev_net_rcu(). The connected Nessus advisories confirm the same CVE across multiple Amazon Linux 2 ...