CVE-2025-40253: Linux 5.18

Affected technology

Linux · 467ddbbe7e749d558f13e640f50f546149c930b3 to before 06f1dd1de0d33dbfbd2e1fc9fc57d8895f730de2, 4d3c6d741816539b57fa1110c3f765a8c176d7b4 to before 6bf8ccaabce8cebb6cb1f255c93d0acdfe95c17a, 2bd57101c3ecf3f8c0da1d26c2b6ad511adc6d50 to before 7616e2eee679746d526c7f5befd4eedb995935b5, 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before 43096dab8cc60fc39133205fd149a54d3acebea8, 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before 3b177b2ded563df16f6d5920671ffcfe5915d472, 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before b9dbfb1b5699f9f1e4991f96741bdf9047147589, 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before 7ff76f8dc6b550f8d16487bf3cebc278be720b5c, 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before da02a1824884d6c84c5e5b5ac373b0c9e3288ec2, 36933de59f67029e5739a98393891f9b94f27e0f, d886b4292a1c5b4facdb2dfdc31f0fecc71df898, 4c9ba0fed125deba8416b995b0c274b0804c0c24, ea0053af5dab4d63a9c44563973fb2f3bfd9eb2b, 5.4.195 to before 5.4.302, 5.10.117 to before 5.10.247, 5.15.41 to before 5.15.197, 4.9.315 to before 4.10, 4.14.280 to before 4.15, 4.19.244 to before 4.20, 5.17.9 to before 5.18
Linux

Linux · 5.18
Linux

Component: Not specified by the source
File: drivers/s390/net/ctcm_mpc.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.