PT-2025-49063 · Linux+2 · Linux Kernel+2

Published 2025-12-04 · Updated 2026-02-24 · CVE-2025-40236

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the virtio-net module. Specifically, when GSO tunnel is negotiated, the virtio net hdr tnl from skb() function fails to zero unused rxhash fields during tunnel metadata initialization. This can potentially lead to information leakage to another side.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-40236

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 391

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40236.json · Exploit
• https://ubuntu.com/security/CVE-2025-40153 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40066 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40331 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40063 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40035 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40049 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40085 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40315 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40223 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68246 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory