CVE-2025-40080 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

nbd: restrict sockets to TCP and UDP

Recently, syzbot started to abuse NBD with all kinds of sockets.

Commit cf1b2326b734 ("nbd: verify socket is supported during setup")
made sure the socket supported a shutdown() method.

Explicitely accept TCP and UNIX stream sockets.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00018.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/37ad11f20e164c23ce827dd455b42c0fdd29685c
https://git.kernel.org/stable/c/4f9e6ff6319dbcebea64b50af0304cf0ad7e97e7
https://git.kernel.org/stable/c/808e2335bc1cf2293b9e36ccc94c267c81509c71
https://git.kernel.org/stable/c/9f7c02e031570e8291a63162c6c046dc15ff85b0
https://git.kernel.org/stable/c/c365e8f20f4201d873a70385bd919f0fb531e960

History

Tue, 28 Oct 2025 12:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 ("nbd: verify socket is supported during setup") made sure the socket supported a shutdown() method. Explicitely accept TCP and UNIX stream sockets.
Title		nbd: restrict sockets to TCP and UDP
References		https://git.kernel.org/stable/c/37ad11f20e164c23ce827dd455b42c0fdd29685c https://git.kernel.org/stable/c/4f9e6ff6319dbcebea64b50af0304cf0ad7e97e7 https://git.kernel.org/stable/c/808e2335bc1cf2293b9e36ccc94c267c81509c71 https://git.kernel.org/stable/c/9f7c02e031570e8291a63162c6c046dc15ff85b0 https://git.kernel.org/stable/c/c365e8f20f4201d873a70385bd919f0fb531e960

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-10-28T11:48:44.796Z

Updated: 2025-10-28T11:48:44.796Z

Reserved: 2025-04-16T07:20:57.160Z

Link: CVE-2025-40080

Vulnrichment

No data.

NVD

Status : Received

Published: 2025-10-28T12:15:42.587

Modified: 2025-10-28T12:15:42.587

Link: CVE-2025-40080

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-40080", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-04-16T07:20:57.160Z", "datePublished": "2025-10-28T11:48:44.796Z", "dateUpdated": "2025-10-28T11:48:44.796Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-10-28T11:48:44.796Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: restrict sockets to TCP and UDP\n\nRecently, syzbot started to abuse NBD with all kinds of sockets.\n\nCommit cf1b2326b734 (\"nbd: verify socket is supported during setup\")\nmade sure the socket supported a shutdown() method.\n\nExplicitely accept TCP and UNIX stream sockets."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/block/nbd.c"], "versions": [{"version": "cf1b2326b734896734c6e167e41766f9cee7686a", "lessThan": "c365e8f20f4201d873a70385bd919f0fb531e960", "status": "affected", "versionType": "git"}, {"version": "cf1b2326b734896734c6e167e41766f9cee7686a", "lessThan": "4f9e6ff6319dbcebea64b50af0304cf0ad7e97e7", "status": "affected", "versionType": "git"}, {"version": "cf1b2326b734896734c6e167e41766f9cee7686a", "lessThan": "37ad11f20e164c23ce827dd455b42c0fdd29685c", "status": "affected", "versionType": "git"}, {"version": "cf1b2326b734896734c6e167e41766f9cee7686a", "lessThan": "808e2335bc1cf2293b9e36ccc94c267c81509c71", "status": "affected", "versionType": "git"}, {"version": "cf1b2326b734896734c6e167e41766f9cee7686a", "lessThan": "9f7c02e031570e8291a63162c6c046dc15ff85b0", "status": "affected", "versionType": "git"}, {"version": "4df728651b8a99693c69962d8e5a5b9e5a3bbcc7", "status": "affected", "versionType": "git"}, {"version": "083322455c67d278c56a66b73f1221f004ee600a", "status": "affected", "versionType": "git"}, {"version": "4fa1cbd587ef967812f9d9f6ce46ec1dead7502c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/block/nbd.c"], "versions": [{"version": "5.4", "status": "affected"}, {"version": "0", "lessThan": "5.4", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.156", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.112", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.53", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.17.3", "lessThanOrEqual": "6.17.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4", "versionEndExcluding": "6.1.156"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4", "versionEndExcluding": "6.6.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4", "versionEndExcluding": "6.12.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4", "versionEndExcluding": "6.17.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4", "versionEndExcluding": "6.18-rc1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14.152"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19.82"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.3.9"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/c365e8f20f4201d873a70385bd919f0fb531e960"}, {"url": "https://git.kernel.org/stable/c/4f9e6ff6319dbcebea64b50af0304cf0ad7e97e7"}, {"url": "https://git.kernel.org/stable/c/37ad11f20e164c23ce827dd455b42c0fdd29685c"}, {"url": "https://git.kernel.org/stable/c/808e2335bc1cf2293b9e36ccc94c267c81509c71"}, {"url": "https://git.kernel.org/stable/c/9f7c02e031570e8291a63162c6c046dc15ff85b0"}], "title": "nbd: restrict sockets to TCP and UDP", "x_generator": {"engine": "bippy-1.2.0"}}}}