Get real-time updates on Telegram
CVE-2025-40248: Linux 3.9; +1 more affected products
CVE-2025-40248 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00157 (percentile 0.04424), scored 19-Oct-2026.
Affected technology
Linux · d021c344051af91f42c5ba9fdedc176740cbd238 to before 3f71753935d648082a8279a97d30efe6b85be680, d021c344051af91f42c5ba9fdedc176740cbd238 to before da664101fb4a0de5cb70d2bae6a650df954df2af, d021c344051af91f42c5ba9fdedc176740cbd238 to before 67432915145848658149683101104e32f9fd6559, d021c344051af91f42c5ba9fdedc176740cbd238 to before eeca93f06df89be5a36305b7b9dae1ed65550dfc, d021c344051af91f42c5ba9fdedc176740cbd238 to before 5998da5a8208ae9ad7838ba322bccb2bdcd95e81, d021c344051af91f42c5ba9fdedc176740cbd238 to before f1c170cae285e4b8f61be043bb17addc3d0a14b5, d021c344051af91f42c5ba9fdedc176740cbd238 to before ab6b19f690d89ae4709fba73a3c4a7911f495b7a, d021c344051af91f42c5ba9fdedc176740cbd238 to before 002541ef650b742a198e4be363881439bb9d86b4
Linux
Linux · 3.9
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: net/vmw_vsock/af_vsock.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
- Product
- azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00157 · percentile 0.04424 · 2026-10-19
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-19 14:17:18.977832+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 19:46:42.191502+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40248.html