CVE-2025-40280 | Linux Kernel up to 295c9b554f6dfcd2d368fae6e6fa22ee5b79c123 spinlock_api_smp.h tipc_mon_reinit_self monitors[] use after free

December 7, 2025 Yanac

A vulnerability identified as critical has been detected in Linux Kernel up to 295c9b554f6dfcd2d368fae6e6fa22ee5b79c123. This vulnerability affects the function tipc_mon_reinit_self of the file include/linux/spinlock_api_smp.h. Performing manipulation of the argument monitors[] results in use after free.

This vulnerability was named CVE-2025-40280. The attack needs to be approached within the local network. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More