PT-2025-46610 · Linux+4 · Linux Kernel+4

CVE-2025-40135 · Published 2025-08-28 · Updated 2026-07-28

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s IPv6 implementation within the ip6 xmit() function. The issue stems from a use-after-free condition that can occur due to improper handling of device pointers. Utilizing Read-Copy-Update (RCU) in ip6 xmit() and employing dst dev rcu() helps mitigate this condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

CWE-825

Related Identifiers

ALSA-2026:1690

ALSA-2026:2212

ALSA-2026:2264

ALSA-2026:2378

AZL-69995

BDU:2025-16147

CVE-2025-40135

ECHO-77D9-BCE2-A130

OPENSUSE-SU-2025:20172-1

RHSA-2026:1690

RHSA-2026:2212

RHSA-2026:2264

RHSA-2026:22964

RHSA-2026:23237

RHSA-2026:2378

RHSA-2026:25218

RHSA-2026:25533

RHSA-2026:26462

RHSA-2026:26515

RHSA-2026:26535

RHSA-2026:27731

SUSE-SU-2026:0278-1

SUSE-SU-2026:0281-1

SUSE-SU-2026:0293-1

SUSE-SU-2026:0315-1

SUSE-SU-2026:0316-1

SUSE-SU-2026:20012-1

SUSE-SU-2026:20015-1

SUSE-SU-2026:20021-1

SUSE-SU-2026:20477-1

SUSE-SU-2026:20498-1

SUSE-SU-2026:20562-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

USN-8567-1

USN-8574-1

USN-8574-2

USN-8574-3

USN-8595-1

USN-8595-2

USN-8595-3

USN-8596-1

USN-8606-1

USN-8607-1

USN-8608-1

USN-8609-1

USN-8619-1

Affected Products

Debian

Linuxmint

Linux Kernel

Rocky Linux

Ubuntu

References · 3540

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40135.json · Exploit
• https://ubuntu.com/security/CVE-2026-43336 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31704 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46070 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31721 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43473 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43012 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45948 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31434 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68167 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23440 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68204 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8608-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43300 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45842 · Vendor Advisory