CVE-2025-40171

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.44% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 36.6% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-07-30.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2025-11-12 10:46Z9 MO AGO

Last updated

2026-08-05 12:08Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

• CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

eb3005c18a209a9a7a3f202e2f0afb8fac16d06f5c4a9197dac7e8c5885bd75c

• git.kernel.orghttps://git.kernel.org/stable/c/11269c08013f4ee8b8f5edc6c56700acb34092d0
• git.kernel.orghttps://git.kernel.org/stable/c/a28112cc55013cd8cbd5d36b5115a5b851151bd9
• git.kernel.orghttps://git.kernel.org/stable/c/060ecc81240ef9d60d9485a3a5eb55a0d6e7a25c
• git.kernel.orghttps://git.kernel.org/stable/c/7331925c247b03b7767b8cd93cfe1b7aa2377850
• git.kernel.orghttps://git.kernel.org/stable/c/7a619f8c869117ffed08365b377f66b7e1d941b4
• git.kernel.orghttps://git.kernel.org/stable/c/db5a5406fb7e5337a074385c7a3e53c77f2c1bd3