CVE-2025-40173

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.14% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 4.1% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-07-30.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2025-11-12 10:53Z9 MO AGO

Last updated

2026-08-05 12:08Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-122Heap-based Buffer OverflowVariant

Data version

5.2

Document digest

6d61282155d30913f6d595fae620b75b50b4c4a3283803bafd3418a8288781b6

• git.kernel.orghttps://git.kernel.org/stable/c/566f8d5c8a443f2dd69c5460fdec43ed1c870c65
• git.kernel.orghttps://git.kernel.org/stable/c/11f6066af3bfb8149aa16c42c0b0c5ea5b199a94
• git.kernel.orghttps://git.kernel.org/stable/c/402b6985e872b4cf394bbbf33b503947a326a6cb
• git.kernel.orghttps://git.kernel.org/stable/c/10fe967efe73c610e526ff7460581610633dee9c
• git.kernel.orghttps://git.kernel.org/stable/c/48294a67863c9cfa367abb66bbf0ef6548ae124f
• git.kernel.orghttps://git.kernel.org/stable/c/eeb4345488672584db4f8c20a1ae13a212ce31c4
• git.kernel.orghttps://git.kernel.org/stable/c/b6eb25d870f1a8ae571fd3da2244b71df547824b
• git.kernel.orghttps://git.kernel.org/stable/c/21f4d45eba0b2dcae5dbc9e5e0ad08735c993f16