PT-2025-46654 · Linux+5 · Linux Kernel+5
Published
2025-10-14
·
Updated
2026-05-07
·
CVE-2025-40176
CVSS v2.0
5.5
Medium
| Vector | AV:L/AC:H/Au:S/C:N/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw related to Transport Layer Security (TLS) asynchronous decryption. Specifically, if the
tls strp msg hold function fails to allocate a clone of the input socket buffer (skb), continuing with asynchronous decryption can lead to use-after-free (UAF) on the skb or writing into userspace memory after the recv() call has completed. The issue occurs because the system does not wait for all pending decryption requests when tls strp msg hold fails.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Linuxmint
Linux Kernel
Red Hat
Rocky Linux
Ubuntu