CVE-2025-40074 | Linux Kernel up to 6.17.2 ipv4 dst_dev_rcu use after free

October 28, 2025 Yanac

A vulnerability labeled as critical has been found in Linux Kernel up to 6.17.2. This vulnerability affects the function dst_dev_rcu of the component ipv4. Executing manipulation can lead to use after free.

This vulnerability is handled as CVE-2025-40074. The attack can only be done within the local network. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More