Vulnerability in Linux

CVE-2025-40010

In the Linux kernel, the following vulnerability has been resolved: afs: Fix potential null pointer dereference in afs_put_server afs_put_server() accessed server->debug_id before the NULL check, which could lead to a null pointer dereference. Move the debug_id assignment, ensuring we never dereference a NULL server pointer.

EPSS: 0.002 (14.0th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 2757a4dc184997c66ef1de32636f73b9f21aac14, 6.0, 0

References