目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

CVE-2025-40248— Linux kernel 安全漏洞

AI Predicted 6.5 Difficulty: Hard EPSS 0.20% · P10

Affected Version Matrix 18

ベンダープロダクトVersion Rangeステータス
LinuxLinuxd021c344051af91f42c5ba9fdedc176740cbd238< 3f71753935d648082a8279a97d30efe6b85be680affected
d021c344051af91f42c5ba9fdedc176740cbd238< da664101fb4a0de5cb70d2bae6a650df954df2afaffected
d021c344051af91f42c5ba9fdedc176740cbd238< 67432915145848658149683101104e32f9fd6559affected
d021c344051af91f42c5ba9fdedc176740cbd238< eeca93f06df89be5a36305b7b9dae1ed65550dfcaffected
d021c344051af91f42c5ba9fdedc176740cbd238< 5998da5a8208ae9ad7838ba322bccb2bdcd95e81affected
d021c344051af91f42c5ba9fdedc176740cbd238< f1c170cae285e4b8f61be043bb17addc3d0a14b5affected
d021c344051af91f42c5ba9fdedc176740cbd238< ab6b19f690d89ae4709fba73a3c4a7911f495b7aaffected
d021c344051af91f42c5ba9fdedc176740cbd238< 002541ef650b742a198e4be363881439bb9d86b4affected
… +10 more rows
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2025-40248の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
vsock: Ignore signal/timeout on connect() if already established
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect() if already established During connect(), acting on a signal/timeout by disconnecting an already established socket leads to several issues: 1. connect() invoking vsock_transport_cancel_pkt() -> virtio_transport_purge_skbs() may race with sendmsg() invoking virtio_transport_get_credit(). This results in a permanently elevated `vvs->bytes_unsent`. Which, in turn, confuses the SOCK_LINGER handling. 2. connect() resetting a connected socket's state may race with socket being placed in a sockmap. A disconnected socket remaining in a sockmap breaks sockmap's assumptions. And gives rise to WARNs. 3. connect() transitioning SS_CONNECTED -> SS_UNCONNECTED allows for a transport change/drop after TCP_ESTABLISHED. Which poses a problem for any simultaneous sendmsg() or connect() and may result in a use-after-free/null-ptr-deref. Do not disconnect socket on signal/timeout. Keep the logic for unconnected sockets: they don't linger, can't be placed in a sockmap, are rejected by sendmsg(). [1]: https://lore.kernel.org/netdev/e07fd95c-9a38-4eea-9638-133e38c2ec9b@rbox.co/ [2]: https://lore.kernel.org/netdev/20250317-vsock-trans-signal-race-v4-0-fc8837f3f1d4@rbox.co/ [3]: https://lore.kernel.org/netdev/60f1b7db-3099-4f6a-875e-af9f6ef194f6@rbox.co/
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于vsock在已建立连接时错误处理信号/超时，可能导致竞争条件和状态不一致。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
LinuxLinux d021c344051af91f42c5ba9fdedc176740cbd238 ~ 3f71753935d648082a8279a97d30efe6b85be680 -
LinuxLinux 3.9 -

II. CVE-2025-40248の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2025-40248のインテリジェンス情報

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-12-04 · 53 CVEs total

CVE-2025-40229mm/damon/core: fix potential memory leak by cleaning ops_filter in damon_destroy_scheme
CVE-2025-40214af_unix: Initialise scc_index in unix_add_edge().
CVE-2025-40215xfrm: delete x->tunnel as we delete x
CVE-2025-40220fuse: fix livelock in synchronous file put from fuseblk workers
CVE-2025-40217pidfs: validate extensible ioctls
CVE-2025-40218mm/damon/vaddr: do not repeat pte_offset_map_lock() until success
CVE-2025-40219PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
CVE-2025-40216io_uring/rsrc: don't rely on user vaddr alignment
CVE-2025-40227mm/damon/sysfs: dealloc commit test ctx always
CVE-2025-40228mm/damon/sysfs: catch commit test ctx alloc failure
CVE-2025-40226firmware: arm_scmi: Account for failed debug initialization
CVE-2025-40230mm: prevent poison consumption when splitting THP
CVE-2025-40231vsock: fix lock inversion in vsock_assign_transport()
CVE-2025-40232rv: Fully convert enabled_monitors to use list_head as iterator
CVE-2025-40233ocfs2: clear extent cache after moving/defragmenting extents
CVE-2025-40234platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers
CVE-2025-40236virtio-net: zero unused hash fields
CVE-2025-40235btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots()
CVE-2025-40237fs/notify: call exportfs_encode_fid with s_umount
CVE-2025-40238net/mlx5: Fix IPsec cleanup over MPV device

Showing 20 of 53 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: Linux
同じベンダー: Linux

V. CVE-2025-40248へのコメント

まだコメントはありません

コメントを残す