In the Linux kernel, the following vulnerability has been resolved:

sctp: Fix MAC comparison to be constant-time

To prevent timing attacks, MACs need to be compared in constant time.
Use the appropriate helper function for this.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00053.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < b93fa8dc521d00d2d44bf034fb90e0d79b036617
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 0e8b8c326c2a6de4d837b1bb034ea704f4690d77
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 1cd60e0d0fb8f0e62ec4499138afce6342dc9d4c
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 9c05d44ec24126fc283835b68f82dba3ae985209
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < ed3044b9c810c5c24eb2830053fbfe5fd134c5d4
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 8019b3699289fce3f10b63f98601db97b8d105b0
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 0b32ff285ff6f6f1ac1d9495787ccce8837d6405
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < dd91c79e4f58fbe2898dac84858033700e0e99fb
Linux Linux affected
Version Status Constraints
2.6.12 affected —
0 unaffected < 2.6.12
5.4.301 unaffected ≤ 5.4.*
5.10.246 unaffected ≤ 5.10.*
5.15.195 unaffected ≤ 5.15.*
6.1.157 unaffected ≤ 6.1.*
6.6.113 unaffected ≤ 6.6.*
6.12.54 unaffected ≤ 6.12.*
6.17.4 unaffected ≤ 6.17.*
6.18 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-4379-1 linux-6.1 security update
Debian DLA Debian DLA DLA-4404-1 linux security update
Ubuntu USN Ubuntu USN USN-8029-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8030-1 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-3 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8034-1 Linux kernel (NVIDIA Tegra) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-4 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8029-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-5 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8034-2 Linux kernel (NVIDIA Tegra IGX) vulnerabilities
Ubuntu USN Ubuntu USN USN-8048-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-6 Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-7 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-8 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-8029-3 Linux kernel (Azure) vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0b32ff285ff6f6f1ac1d9495787ccce8837d6405 cve-icon cve-icon
https://git.kernel.org/stable/c/0e8b8c326c2a6de4d837b1bb034ea704f4690d77 cve-icon cve-icon
https://git.kernel.org/stable/c/1cd60e0d0fb8f0e62ec4499138afce6342dc9d4c cve-icon cve-icon
https://git.kernel.org/stable/c/8019b3699289fce3f10b63f98601db97b8d105b0 cve-icon cve-icon
https://git.kernel.org/stable/c/9c05d44ec24126fc283835b68f82dba3ae985209 cve-icon cve-icon
https://git.kernel.org/stable/c/b93fa8dc521d00d2d44bf034fb90e0d79b036617 cve-icon cve-icon
https://git.kernel.org/stable/c/dd91c79e4f58fbe2898dac84858033700e0e99fb cve-icon cve-icon
https://git.kernel.org/stable/c/ed3044b9c810c5c24eb2830053fbfe5fd134c5d4 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025111247-CVE-2025-40204-0f06@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-40204 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-40204 cve-icon
History

Mon, 01 Dec 2025 06:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Thu, 13 Nov 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Thu, 13 Nov 2025 10:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 12 Nov 2025 22:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.
Title sctp: Fix MAC comparison to be constant-time
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-01T06:20:07.600Z

Reserved: 2025-04-16T07:20:57.179Z

Link: CVE-2025-40204

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-11-12T22:15:47.647

Modified: 2025-11-14T16:42:30.503

Link: CVE-2025-40204

cve-icon Redhat

Severity : Important

Publid Date: 2025-11-12T00:00:00Z

Links: CVE-2025-40204 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-11-13T09:52:20Z

Weaknesses

No weakness.