Get real-time updates on Telegram
CVE-2025-40006: Linux 4.5
CVE-2025-40006. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00202 (percentile 0.09486), scored 19-Oct-2026.
Affected technology
Linux · 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before bc1c9ce8aeff45318332035dbef9713fb9e982d7, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before 91f548e920fbf8be3f285bfa3fa045ae017e836d, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before 3e851448078f5b01f6264915df3cfef75e323a12, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before c1dc0524ab2cc3982d4e0d2bfac71a0cd4d65c39, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before c9c2a51f91aea70e89b496cac360cd795a2b3c26, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before 910d7749346c4b0acdc6e4adfdc4a9984281a206, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before 21ee79ce938127f88fe07e409c1817f477dbe7ea, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before 7b7387650dcf2881fd8bb55bcf3c8bd6c9542dd7
Linux
Linux · 4.5
Linux
Component: Not specified by the source
File: fs/hugetlbfs/inode.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.3 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00202 · percentile 0.09486 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40006.html