CVE-2025-40018

mediumpriority · track · 0EPSS 0.002 · 4 %ileDEEURU

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.15% (4th) EPSS

CVSS 6.6 · medium

Is it mine?

43 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp before connections with valid cp->app pointers are flushed, leading to a use-after-free. Fix this by introducing a global `exiting_module` flag, set to true in ip_vs_ftp_exit() before unregistering the pernet subsystem. In __ip_vs_ftp_exit(), skip ip_vs_ftp unregister if called during netns cleanup (when exiting_module is false) and defer it to __ip_vs_cleanup_batch(), which unregisters all apps after all connections are flushed. If called during module exit, unregister ip_vs_ftp immediately.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedkernel-default-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-base-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-devel-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-docs-0:3.0.101-108.198.1.noarch as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-ec2-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-ec2-base-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-ec2-devel-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-source-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-syms-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-trace-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-trace-base-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-trace-devel-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-xen-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-xen-base-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-xen-devel-0:3.0.101-108.198.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_7_19-rt-0:5-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_7_3-rt-0:13-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-obs-build-0:6.12.0-160000.7.1.aarch64 as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-obs-build-0:6.12.0-160000.7.1.ppc64le as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-obs-build-0:6.12.0-160000.7.1.s390x as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-obs-build-0:6.12.0-160000.7.1.x86_64 as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-syms-0:6.12.0-160000.7.1.aarch64 as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-syms-0:6.12.0-160000.7.1.ppc64le as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-syms-0:6.12.0-160000.7.1.s390x as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-syms-0:6.12.0-160000.7.1.x86_64 as component of SUSE Linux Micro Extras 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-devel-longterm-0:6.18.16-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-devel-longterm-0:6.18.16-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-devel-longterm-0:6.18.16-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-devel-longterm-0:6.18.16-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-source-longterm-0:6.18.16-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-source-longterm-0:6.18.16-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-source-longterm-0:6.18.16-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-source-longterm-0:6.18.16-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.6–7.8

v3.16.6mediumAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Hsecondary · FSTEC (BDU) RU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 1.8 · impact 5.9

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · SUSE Product Security

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-416US

affected products (43)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Dell ECS 3.8.1.0-3.8.1.7all versionscert_bundDEcpe:/h:dell:ecs:3.8.1.0_-_3.8.1.7
Google Cloud Platformall versionscert_bundDEcpe:/a:google:cloud_platform:-
Open Source Linux Kernelall versionscert_bundDEcpe:/o:linux:linux_kernel:-
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-
Siemens SIMATIC S7 1500 CPUall versionscert_bundDEcpe:/h:siemens:simatic_s7:1500_cpu
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
Dell Dell NetWorker vProxy <19.14≤ vProxy <19.14cert_bundDE
Dell Networker≤ vProxy <19.14cert_bundDE
Linux Linuxall versionsenisa_euvdEU
Linux Linux≤ 2.6.39enisa_euvdEU
Linux Linux< 5.10.246enisa_euvdEU
Linux Linux< 5.15.195enisa_euvdEU
Linux Linux< 5.4.301enisa_euvdEU
Linux Linux< 6.1.156enisa_euvdEU
Linux Linux< 6.12.53enisa_euvdEU
Linux Linux< 6.17.3enisa_euvdEU

showing 20 of 43

advisories (7)

Vendor and ecosystem advisories describing this.

SUSE-SU-2026:0352-1Security update for the Linux Kernel2026-01-30csaf · suse_csafDE
Security update for the Linux Kernel
SUSE-SU-2026:1185-1Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP7)2026-04-03csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:1188-1Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)2026-04-05csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:20561-1Security update for the Linux Kernel2025-11-26csaf · suse_csafDE
Security update for the Linux Kernel
WID-SEC-W-2025-2407Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2025-10-26csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.
WID-SEC-W-2026-0349Dell Avamar und NetWorker: Mehrere SchwachstellenDeutsch2026-02-09csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell Avamar und Dell NetWorker ausnutzen, um Angriffe zu starten, die die Integrität, Vertraulichkeit und Verfügbarkeit von Systemen beeinträchtigen.
openSUSE-SU-2026:10301-1kernel-devel-longterm-6.18.16-1.1 on GA media2026-03-07csaf · suse_csafDE
kernel-devel-longterm-6.18.16-1.1 on GA media

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund suse_csaf NVD CVE.org MITRE

published 2025-10-24modified 2026-10-19

references (24)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan