CVE-2025-40187

CVE-2025-40187 affects the Linux kernel SCTP implementation. The issue is a possible NULL pointer dereference in net/sctp during disposition handling (sctp_disposition; sctp_sf_do_5_1D_ce) when new_asoc->peer.adaptation_ind==0 and sctp_ulpevent_make_authkey==0, and sctp_ulpevent_make_authkey()...