In the Linux kernel, the following vulnerability has been resolved:

net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()

If new_asoc->peer.adaptation_ind=0 and sctp_ulpevent_make_authkey=0
and sctp_ulpevent_make_authkey() returns 0, then the variable
ai_ev remains zero and the zero will be dereferenced
in the sctp_ulpevent_free() function.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00024.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux
  • Linux Kernel
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/025419f4e216a3ae0d0cec622262e98e8078c447 cve-icon cve-icon
https://git.kernel.org/stable/c/1014b83778c8677f1d7a57c26dc728baa801ac62 cve-icon cve-icon
https://git.kernel.org/stable/c/2f3119686ef50319490ccaec81a575973da98815 cve-icon cve-icon
https://git.kernel.org/stable/c/7f702f85df0266ed7b5bab81ba50394c92f3c928 cve-icon cve-icon
https://git.kernel.org/stable/c/badbd79313e6591616c1b78e29a9b71efed7f035 cve-icon cve-icon
https://git.kernel.org/stable/c/c21f45cfa4a9526b34d76b397c9ef080668b6e73 cve-icon cve-icon
https://git.kernel.org/stable/c/d0e8f1445c19b1786759ba72a38267e1449bab7e cve-icon cve-icon
https://git.kernel.org/stable/c/dbceedc0213e75bf3e9f9f9e2f66b10699d004fe cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025111244-CVE-2025-40187-7826@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-40187 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-40187 cve-icon
History

Thu, 13 Nov 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Thu, 13 Nov 2025 10:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 12 Nov 2025 22:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() If new_asoc->peer.adaptation_ind=0 and sctp_ulpevent_make_authkey=0 and sctp_ulpevent_make_authkey() returns 0, then the variable ai_ev remains zero and the zero will be dereferenced in the sctp_ulpevent_free() function.
Title net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-11-12T21:56:29.504Z

Reserved: 2025-04-16T07:20:57.177Z

Link: CVE-2025-40187

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-11-12T22:15:45.577

Modified: 2025-11-14T16:42:30.503

Link: CVE-2025-40187

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-11-12T00:00:00Z

Links: CVE-2025-40187 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-11-13T09:52:25Z