In the Linux kernel, the following vulnerability has been resolved:

net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()

If new_asoc->peer.adaptation_ind=0 and sctp_ulpevent_make_authkey=0
and sctp_ulpevent_make_authkey() returns 0, then the variable
ai_ev remains zero and the zero will be dereferenced
in the sctp_ulpevent_free() function.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00053.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b affected < 1014b83778c8677f1d7a57c26dc728baa801ac62
30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b affected < 7f702f85df0266ed7b5bab81ba50394c92f3c928
30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b affected < dbceedc0213e75bf3e9f9f9e2f66b10699d004fe
30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b affected < 025419f4e216a3ae0d0cec622262e98e8078c447
30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b affected < c21f45cfa4a9526b34d76b397c9ef080668b6e73
30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b affected < d0e8f1445c19b1786759ba72a38267e1449bab7e
30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b affected < badbd79313e6591616c1b78e29a9b71efed7f035
30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b affected < 2f3119686ef50319490ccaec81a575973da98815
Linux Linux affected
Version Status Constraints
4.17 affected —
0 unaffected < 4.17
5.4.301 unaffected ≤ 5.4.*
5.10.246 unaffected ≤ 5.10.*
5.15.195 unaffected ≤ 5.15.*
6.1.157 unaffected ≤ 6.1.*
6.6.113 unaffected ≤ 6.6.*
6.12.54 unaffected ≤ 6.12.*
6.17.4 unaffected ≤ 6.17.*
6.18 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-4379-1 linux-6.1 security update
Debian DLA Debian DLA DLA-4404-1 linux security update
Ubuntu USN Ubuntu USN USN-8029-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8030-1 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-3 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8034-1 Linux kernel (NVIDIA Tegra) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-4 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8029-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-5 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8034-2 Linux kernel (NVIDIA Tegra IGX) vulnerabilities
Ubuntu USN Ubuntu USN USN-8048-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-6 Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-7 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-8 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-8029-3 Linux kernel (Azure) vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/025419f4e216a3ae0d0cec622262e98e8078c447 cve-icon cve-icon
https://git.kernel.org/stable/c/1014b83778c8677f1d7a57c26dc728baa801ac62 cve-icon cve-icon
https://git.kernel.org/stable/c/2f3119686ef50319490ccaec81a575973da98815 cve-icon cve-icon
https://git.kernel.org/stable/c/7f702f85df0266ed7b5bab81ba50394c92f3c928 cve-icon cve-icon
https://git.kernel.org/stable/c/badbd79313e6591616c1b78e29a9b71efed7f035 cve-icon cve-icon
https://git.kernel.org/stable/c/c21f45cfa4a9526b34d76b397c9ef080668b6e73 cve-icon cve-icon
https://git.kernel.org/stable/c/d0e8f1445c19b1786759ba72a38267e1449bab7e cve-icon cve-icon
https://git.kernel.org/stable/c/dbceedc0213e75bf3e9f9f9e2f66b10699d004fe cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025111244-CVE-2025-40187-7826@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-40187 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-40187 cve-icon
History

Mon, 01 Dec 2025 06:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Thu, 13 Nov 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Thu, 13 Nov 2025 10:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 12 Nov 2025 22:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() If new_asoc->peer.adaptation_ind=0 and sctp_ulpevent_make_authkey=0 and sctp_ulpevent_make_authkey() returns 0, then the variable ai_ev remains zero and the zero will be dereferenced in the sctp_ulpevent_free() function.
Title net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-01T06:19:45.756Z

Reserved: 2025-04-16T07:20:57.177Z

Link: CVE-2025-40187

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-11-12T22:15:45.577

Modified: 2025-11-14T16:42:30.503

Link: CVE-2025-40187

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-11-12T00:00:00Z

Links: CVE-2025-40187 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-11-13T09:52:25Z

Weaknesses

No weakness.