01 Record

CVE-2025-40078

bpf: Explicitly check accesses to bpf_sock_addr

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

bpf: Explicitly check accesses to bpf_sock_addr

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.22% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 13.0% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Deferred. NVD last modified this record on 2026-07-14.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-10-28 11:48Z10 MO AGO

Last updated

2026-07-14 12:43Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-20Improper Input ValidationClass

Data version

5.2

Document digest

85544527585bd1c41f4a20d39248934abfac30a7ab5e53a54b1938bc19ff0745

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1cedee13d25ab118d325f95588c1a084e9317229 to < de44cdc50d2dce8718cb57deddf9cf1be9a7759f, 1cedee13d25ab118d325f95588c1a084e9317229 to < 76e04bbb4296fb6eac084dbfc27e02ccc744db3e, 1cedee13d25ab118d325f95588c1a084e9317229 to < 6d8b1a21fd5c34622b0c3893c61e4a38d8ba53ec, 1cedee13d25ab118d325f95588c1a084e9317229 to < 4f00858cd9bbbdf67159e28b85a8ca9e77c83622, 1cedee13d25ab118d325f95588c1a084e9317229 to < cdeafacb4f9ff261a96baef519e29480fd7b1019, 1cedee13d25ab118d325f95588c1a084e9317229 to < fe9d33f0470350558cb08cecb54cf2267b3a45d2, 1cedee13d25ab118d325f95588c1a084e9317229 to < ad8b4fe5617e3c85fc23267f02500c4f3bf0ff69, 1cedee13d25ab118d325f95588c1a084e9317229 to < 6fabca2fc94d33cdf7ec102058983b086293395f, 4.18—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/de44cdc50d2dce8718cb57deddf9cf1be9a7759f
git.kernel.orghttps://git.kernel.org/stable/c/76e04bbb4296fb6eac084dbfc27e02ccc744db3e
git.kernel.orghttps://git.kernel.org/stable/c/6d8b1a21fd5c34622b0c3893c61e4a38d8ba53ec
git.kernel.orghttps://git.kernel.org/stable/c/4f00858cd9bbbdf67159e28b85a8ca9e77c83622
git.kernel.orghttps://git.kernel.org/stable/c/cdeafacb4f9ff261a96baef519e29480fd7b1019
git.kernel.orghttps://git.kernel.org/stable/c/fe9d33f0470350558cb08cecb54cf2267b3a45d2
git.kernel.orghttps://git.kernel.org/stable/c/ad8b4fe5617e3c85fc23267f02500c4f3bf0ff69
git.kernel.orghttps://git.kernel.org/stable/c/6fabca2fc94d33cdf7ec102058983b086293395f
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2025-40078

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-40078

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References