CVE-2025-40240
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
sctp: avoid NULL dereference when chunk data buffer is missing
In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only. chunk->skb can only be NULL if chunk->head_skb is not. Check for frag_list instead and do it just before replacing chunk->skb. We're sure that otherwise chunk->skb is non-NULL because of outer if() condition.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 90017accff61ae89283ad9a51f9ac46ca01633fb | affected | git | 61cda2777b07d27459f5cac5a047c3edf9c8a1a9 | Unavailable | None listed |
| 90017accff61ae89283ad9a51f9ac46ca01633fb | affected | git | 08165c296597075763130919f2aae59b5822f016 | Unavailable | None listed |
| 90017accff61ae89283ad9a51f9ac46ca01633fb | affected | git | 03e80a4b04ef1fb2c61dd63216ab8d3a5dcb196f | Unavailable | None listed |
| 90017accff61ae89283ad9a51f9ac46ca01633fb | affected | git | 4f6da435fb5d8a21cbf8cae5ca5a2ba0e1012b71 | Unavailable | None listed |
| 90017accff61ae89283ad9a51f9ac46ca01633fb | affected | git | cb9055ba30306ede4ad920002233d0659982f1cb | Unavailable | None listed |
| 90017accff61ae89283ad9a51f9ac46ca01633fb | affected | git | 7a832b0f99be19df608cb75c023f8027b1789bd1 | Unavailable | None listed |
| 90017accff61ae89283ad9a51f9ac46ca01633fb | affected | git | 89b465b54227c245ddc7cc9ed822231af21123ef | Unavailable | None listed |
| 90017accff61ae89283ad9a51f9ac46ca01633fb | affected | git | 441f0647f7673e0e64d4910ef61a5fb8f16bfb82 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.8 | Unavailable | None listed |
| 5.4.301 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.246 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.196 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.158 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.115 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.56 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.17.6 | unaffected | semver | Unavailable | 6.17.* | None listed |
| 6.18 | unaffected | original_commit_for_fix | Unavailable | * | None listed |