CVE-2025-40135

NONECVSS 0.0

0.0

In the Linux kernel, the following vulnerability has been resolved:

ipv6: use RCU in ip6_xmit()

Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.

CVSS v3: —
EG Score: 0.0(none)
EPSS: 11.9%
KEV: Not listed

Published

November 12, 2025

Last Modified

April 15, 2026

References (5)

416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9085e56501d93af9f2d7bd16f7fcfacdde47b99c
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bd0905e2122e3680968cd0741966983490bf2ed3
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f0a54d00d2f36de40266f47c27989853e8588656
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f69fec6287565fdeb61f65e700a1184352306943
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f7f9e924f23684b4b23cd9f976cceab24a968e34

Vendor Advisories for CVE-2025-40135(6)

These vendors published their own advisory mentioning this CVE — often with vendor-specific remediation steps + affected product lists not in NVD.

Patch Availability(10)

Vendor / Ecosystem	Fixed in / Patch	Released	Source
ubuntu	linux-tools-gcp-64k-6.17 (6.17.0-1007.7) @ questing	2026-05-21	ubuntu
ubuntu	linux-tools-oem-6.17 (6.17.0-1011.11) @ noble	2026-05-21	ubuntu
ubuntu	linux-virtual-hwe-24.04-edge (6.17.0-14.14) @ questing	2026-05-21	ubuntu
ubuntu	linux-tools-oracle-64k-6.17 (6.17.0-1007.7) @ questing	2026-05-21	ubuntu
ubuntu	linux-tools-azure-6.17 (6.17.0-1008.8) @ questing	2026-05-21	ubuntu
redhat	kernel-rt-0:4.18.0-553.104.1.rt7.445.el8_10	2026-02-10	redhat
redhat	kernel-0:4.18.0-553.104.1.el8_10	2026-02-09	redhat
redhat	kernel-0:5.14.0-611.30.1.el9_7	2026-02-09	redhat
redhat	kernel-0:6.12.0-124.31.1.el10_1	2026-02-02	redhat
linux	Kernel @ 6.1.167	—	osv

Patches are aggregated from vendor advisories (Red Hat, Microsoft, Cisco, GitHub) and package ecosystems (OSV, GHSA). Multiple rows for the same upstream release have been deduplicated.

Additional Vendor Advisories

(5)

Vendors that published advisories for this CVE beyond the curated set above. Broader coverage but minimal per-row detail — click through for the original advisory.

Data Freshness Timeline

(refreshed 10× in last 7d / 20× in last 30d)

Every time one of our enrichment pipelines (NVD, MITRE cvelistV5, EPSS, CISA KEV, GHSA, OSV, vendor advisories) ran against this CVE. Most recent first.

2026-06-04 13:12 UTCepss_batch
2026-06-04 13:12 UTCepss_batch
2026-06-02 20:12 UTCepss_batch
2026-06-02 06:09 UTCOSV refresh
2026-06-01 13:51 UTCepss_batch
2026-06-01 13:51 UTCepss_batch
2026-05-31 22:30 UTCepss_batch
2026-05-31 22:30 UTCepss_batch
2026-05-31 00:16 UTCepss_batch
2026-05-29 13:44 UTCepss_batch
2026-05-28 13:44 UTCepss_batch
2026-05-28 13:44 UTCepss_batch
2026-05-28 13:44 UTCepss_batch
2026-05-28 13:44 UTCepss_batch
2026-05-27 13:40 UTCepss_batch
2026-05-27 13:40 UTCepss_batch
2026-05-27 13:40 UTCepss_batch
2026-05-27 13:40 UTCepss_batch
2026-05-26 13:43 UTCepss_batch
2026-05-26 13:43 UTCepss_batch

Frequently asked(4)

What is CVE-2025-40135?

CVE-2025-40135 is a none vulnerability published on November 12, 2025. In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6xmit() in order to use dstdev_rcu() to prevent possible UAF.

When was CVE-2025-40135 disclosed?

CVE-2025-40135 was first published in the National Vulnerability Database on November 12, 2025, with the most recent update on April 15, 2026. EchelonGraph re-ingests CVE updates from NVD on a 2-hour cycle, so this page reflects the latest published state.

Is CVE-2025-40135 actively exploited?

CVE-2025-40135 is not currently on CISA's Known Exploited Vulnerabilities catalog. FIRST EPSS estimates a 11.9% percentile likelihood of exploitation in the next 30 days — higher percentiles indicate greater predicted risk.

How do I remediate CVE-2025-40135?

Patch to the fixed version published by the affected vendor. Where vendor advisories exist for CVE-2025-40135, EchelonGraph cross-links them in the Vendor Advisories panel below — those typically contain the canonical remediation steps, fixed version numbers, and any vendor-specific mitigations.

Dependency Blast Radius

See which npm, PyPI, Go, and Maven packages are affected by CVE-2025-40135

Explore →

Is Your Infrastructure Affected by CVE-2025-40135?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs

CVE-2025-40135

📅 Published

🔄 Last Modified

🔗 References (5)

📣 Vendor Advisories for CVE-2025-40135(6)