{"id":"CVE-2025-40075","title":"tcp_metrics: use dst_dev_net_rcu()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ntcp_metrics: use dst_dev_net_rcu()\n\nReplace three dst_dev() with a lockdep enabled helper.","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 7012bea5622396b37566fbdc059f7c6a6c279d74","Linux >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 4b89397807eb04986427c4786d065e9442834ad4","Linux >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 07613a95326ebad2d1b88d883cd72546025a4f3e","Linux >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 50c127a69cd6285300931853b352a1918cfa180f","Linux 4.13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T21:56:41.266469Z"},"published":"2025-10-28","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:37:45.397Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-40075","references":[{"url":"https://git.kernel.org/stable/c/7012bea5622396b37566fbdc059f7c6a6c279d74"},{"url":"https://git.kernel.org/stable/c/4b89397807eb04986427c4786d065e9442834ad4"},{"url":"https://git.kernel.org/stable/c/07613a95326ebad2d1b88d883cd72546025a4f3e"},{"url":"https://git.kernel.org/stable/c/50c127a69cd6285300931853b352a1918cfa180f"}],"tags":["cve.org"],"epss":0.00492,"epssPercentile":0.42047,"ingestedAt":"2026-10-15T22:48:25.545Z","slug":"CVE-2025-40075","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntcp_metrics: use dst_dev_net_rcu()\n\nReplace three dst_dev() with a lockdep enabled helper.\n\n## Affected\n\n- `Linux >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 7012bea5622396b37566fbdc059f7c6a6c279d74`\n- `Linux >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 4b89397807eb04986427c4786d065e9442834ad4`\n- `Linux >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 07613a95326ebad2d1b88d883cd72546025a4f3e`\n- `Linux >= 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 < 50c127a69cd6285300931853b352a1918cfa180f`\n- `Linux 4.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}