Vulnerability in Linux

CVE-2025-40173

In the Linux kernel, the following vulnerability has been resolved: net/ip6_tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev->needed_headroom, too. While ipv4 tunnel headroom adjustment growth wa…

EPSS: 0.002 (6.8th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 8eb30be0352d09165e94a41fef1c7b994dca0714, 4.7, 0

References