Get real-time updates on Telegram
CVE-2025-40074: Linux 4.13
CVE-2025-40074 affects linux. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00461 (percentile 0.37754), scored 03-Oct-2026. Fixed version: 6.12.107-1. Fixed version: 6.17.6-1. Fixed version: 6.12.107-1~deb12u1.
Affected technology
Linux · 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 864155c164654110f68a17a63bd0339754790d67, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before e150f273cd8ed34ebc6d03758aad95c12fc58337, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 684efb2c86c887685f9aa65e1a21b3df6c1f822d, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 923e0734c386984d45de508528a7a7ad91d791cc, 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 to before 6ad8de3cefdb6ffa6708b21c567df0dbf82c43a8
Linux
Linux · 4.13
Linux
Component: Not specified by the source
File: net/ipv4/icmp.c, net/ipv4/ip_fragment.c, net/ipv4/ipmr.c, net/ipv4/route.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- linux
- CCR priority
- 39.3 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00461 · percentile 0.38615 · 2026-10-19
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-19 14:17:18.977832+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40074.html