CVE-2025-40176

The CVE-2025-40176 issue affects the Linux kernel TLS path used for async decryption. If tls_strp_msg_hold fails to allocate a clone of the input skb, proceeding with async decryption can cause use-after-free on the skb or writes to userspace memory after recv(). The documented fix is to wait for...