CVE-2025-40018

mediumPriorität · verfolgen · 0EPSS 0.002 · 4. PerzentilDEEURU

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.15% (4th) EPSS

CVSS 6.6 · medium

Is it mine?

43 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp before connections with valid cp->app pointers are flushed, leading to a use-after-free. Fix this by introducing a global `exiting_module` flag, set to true in ip_vs_ftp_exit() before unregistering the pernet subsystem. In __ip_vs_ftp_exit(), skip ip_vs_ftp unregister if called during netns cleanup (when exiting_module is false) and defer it to __ip_vs_cleanup_batch(), which unregisters all apps after all connections are flushed. If called during module exit, unregister ip_vs_ftp immediately.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenkernel-default-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-default-base-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-default-devel-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-docs-0:3.0.101-108.198.1.noarch as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-ec2-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-ec2-base-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-ec2-devel-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-source-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-syms-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-trace-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-trace-base-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-trace-devel-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-xen-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-xen-base-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-xen-devel-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-livepatch-6_4_0-150700_7_19-rt-0:5-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-livepatch-6_4_0-150700_7_3-rt-0:13-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-obs-build-0:6.12.0-160000.7.1.aarch64 as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-obs-build-0:6.12.0-160000.7.1.ppc64le as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-obs-build-0:6.12.0-160000.7.1.s390x as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-obs-build-0:6.12.0-160000.7.1.x86_64 as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-syms-0:6.12.0-160000.7.1.aarch64 as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-syms-0:6.12.0-160000.7.1.ppc64le as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-syms-0:6.12.0-160000.7.1.s390x as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-syms-0:6.12.0-160000.7.1.x86_64 as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-devel-longterm-0:6.18.16-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-devel-longterm-0:6.18.16-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-devel-longterm-0:6.18.16-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-devel-longterm-0:6.18.16-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-source-longterm-0:6.18.16-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-source-longterm-0:6.18.16-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-source-longterm-0:6.18.16-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenkernel-source-longterm-0:6.18.16-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.6–7.8

v3.16.6mediumAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Hsecondary · FSTEC (BDU) RU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HsecondaryAusnutzbarkeit 1.8 · Auswirkung 5.9

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · SUSE Product Security

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-416US

betroffene Produkte (43)

Betroffene Produkte und Versionsbereiche.

Amazon Linux 2alle Versionencert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxalle Versionencert_bundDEcpe:/o:debian:debian_linux:-
Dell ECS 3.8.1.0-3.8.1.7alle Versionencert_bundDEcpe:/h:dell:ecs:3.8.1.0_-_3.8.1.7
Google Cloud Platformalle Versionencert_bundDEcpe:/a:google:cloud_platform:-
Open Source Linux Kernelalle Versionencert_bundDEcpe:/o:linux:linux_kernel:-
Oracle Linuxalle Versionencert_bundDEcpe:/o:oracle:linux:-
SUSE Linuxalle Versionencert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEalle Versionencert_bundDEcpe:/o:suse:opensuse:-
Siemens SIMATIC S7 1500 CPUalle Versionencert_bundDEcpe:/h:siemens:simatic_s7:1500_cpu
Ubuntu Linuxalle Versionencert_bundDEcpe:/o:canonical:ubuntu_linux:-
Dell Dell NetWorker vProxy <19.14≤ vProxy <19.14cert_bundDE
Dell Networker≤ vProxy <19.14cert_bundDE
Linux Linuxalle Versionenenisa_euvdEU
Linux Linux≤ 2.6.39enisa_euvdEU
Linux Linux< 5.10.246enisa_euvdEU
Linux Linux< 5.15.195enisa_euvdEU
Linux Linux< 5.4.301enisa_euvdEU
Linux Linux< 6.1.156enisa_euvdEU
Linux Linux< 6.12.53enisa_euvdEU
Linux Linux< 6.17.3enisa_euvdEU

20 von 43 angezeigt

Advisories (7)

Hersteller- und Ökosystem-Meldungen dazu.

SUSE-SU-2026:0352-1Security update for the Linux Kernel2026-01-30csaf · suse_csafDE
Security update for the Linux Kernel
SUSE-SU-2026:1185-1Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP7)2026-04-03csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:1188-1Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)2026-04-05csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:20561-1Security update for the Linux Kernel2025-11-26csaf · suse_csafDE
Security update for the Linux Kernel
WID-SEC-W-2025-2407Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2025-10-26csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.
WID-SEC-W-2026-0349Dell Avamar und NetWorker: Mehrere SchwachstellenDeutsch2026-02-09csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell Avamar und Dell NetWorker ausnutzen, um Angriffe zu starten, die die Integrität, Vertraulichkeit und Verfügbarkeit von Systemen beeinträchtigen.
openSUSE-SU-2026:10301-1kernel-devel-longterm-6.18.16-1.1 on GA media2026-03-07csaf · suse_csafDE
kernel-devel-longterm-6.18.16-1.1 on GA media

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund suse_csaf NVD CVE.org MITRE

veröffentlicht 2025-10-24geändert 2026-10-19

Referenzen (24)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan