CVE-2025-40187 is a null dereference vulnerability in the Linux kernel's SCTP implementation, specifically within the sctp_sf_do_5_1D_ce() function. This flaw occurs when specific conditions related to adaptation indication and authentication key creation lead to a zero value being dereferenced. While a CVSS score is not provided, its EPSS and FAUCET Risk Scores are very low, suggesting minimal practical impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 4.17CNA affecteddefault affected | |
| Linux | Linux | >= 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b, < 025419f4e216a3ae0d0cec622262e98e8078c447, >= 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b, < 1014b83778c8677f1d7a57c26dc728baa801ac62, >= 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b, < 2f3119686ef50319490ccaec81a575973da98815, >= 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b, < 7f702f85df0266ed7b5bab81ba50394c92f3c928, >= 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b, < badbd79313e6591616c1b78e29a9b71efed7f035, >= 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b, < c21f45cfa4a9526b34d76b397c9ef080668b6e73, >= 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b, < d0e8f1445c19b1786759ba72a38267e1449bab7e, >= 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b, < dbceedc0213e75bf3e9f9f9e2f66b10699d004feCNA affecteddefault unaffected |
CVSS data has not been published for this CVE.
Linux kernel (Xilinx) vulnerabilities
May 7, 2026Linux kernel (Azure) vulnerabilities
May 7, 2026Linux kernel (Azure) vulnerabilities
Apr 13, 2026Linux kernel (Azure FIPS) vulnerabilities
Apr 9, 2026Linux kernel (Azure FIPS) vulnerabilities
Apr 9, 2026Linux kernel (Raspberry Pi) vulnerabilities
Apr 1, 2026Linux kernel (Raspberry Pi) vulnerabilities
Apr 1, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (AWS) vulnerabilities
Mar 23, 2026Linux kernel (Real-time) vulnerabilities
Mar 17, 2026Linux kernel (FIPS) vulnerabilities
Mar 16, 2026Linux kernel (NVIDIA) vulnerabilities
Mar 16, 2026Linux kernel vulnerabilities
Mar 16, 2026Linux kernel (Azure) vulnerabilities
Feb 24, 2026kernel: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
Nov 12, 2025net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
Nov 11, 2025