CVE-2025-40176

CVE-2025-40176 addresses a vulnerability in the Linux kernel's TLS implementation where a failure to allocate a cloned skb for asynchronous decryption can lead to use-after-free (UAF) or writing into userspace memory. This issue arises when tls_strp_msg_hold fails, and the system proceeds with async decryption without waiting for pending requests. While no CVSS score is available, the potential for UAF and memory corruption suggests a moderate severity, though specific attack vectors and complexity are not detailed. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.