01 Record

CVE-2025-40018

ipvs: Defer ip_vs_ftp unregister during netns cleanup

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

ipvs: Defer ip_vs_ftp unregister during netns cleanup

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.15% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 4.1% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-10-19.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-10-24 11:44Z1 YR AGO
Last updated: 2026-10-15 22:02Z13 DAYS AGO
Reserved: 2025-04-16
Assigning CNA: Linux
Record state: PUBLISHED
Severity: High (CVSS 7.8)
CNA CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: a5b20a1691df71e192896c2fe8c530134d6b7adbbdf20dcbcbc5f511994ed99b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux61b1ab4583e275af216c8454b9256de680499b19 to < 8a6ecab3847c213ce2855b0378e63ce839085de3, 61b1ab4583e275af216c8454b9256de680499b19 to < 421b1ae1574dfdda68b835c15ac4921ec0030182, 61b1ab4583e275af216c8454b9256de680499b19 to < 1d79471414d7b9424d699afff2aa79fff322f52d, 61b1ab4583e275af216c8454b9256de680499b19 to < 53717f8a4347b78eac6488072ad8e5adbaff38d9, 61b1ab4583e275af216c8454b9256de680499b19 to < 8cbe2a21d85727b66d7c591fd5d83df0d8c4f757, 61b1ab4583e275af216c8454b9256de680499b19 to < dc1a481359a72ee7e548f1f5da671282a7c13b8f, 61b1ab4583e275af216c8454b9256de680499b19 to < a343811ef138a265407167294275201621e9ebb2, 61b1ab4583e275af216c8454b9256de680499b19 to < 134121bfd99a06d44ef5ba15a9beb075297c0821, 2.6.39—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/8a6ecab3847c213ce2855b0378e63ce839085de3
git.kernel.orghttps://git.kernel.org/stable/c/421b1ae1574dfdda68b835c15ac4921ec0030182
git.kernel.orghttps://git.kernel.org/stable/c/1d79471414d7b9424d699afff2aa79fff322f52d
git.kernel.orghttps://git.kernel.org/stable/c/53717f8a4347b78eac6488072ad8e5adbaff38d9
git.kernel.orghttps://git.kernel.org/stable/c/8cbe2a21d85727b66d7c591fd5d83df0d8c4f757
git.kernel.orghttps://git.kernel.org/stable/c/dc1a481359a72ee7e548f1f5da671282a7c13b8f
git.kernel.orghttps://git.kernel.org/stable/c/a343811ef138a265407167294275201621e9ebb2
git.kernel.orghttps://git.kernel.org/stable/c/134121bfd99a06d44ef5ba15a9beb075297c0821

07 Fixed in

Debian 12

linux
Fixed in 6.1.158-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.57-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.17.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.