Critical UAF Vulnerability in Linux Kernel Affecting Debian Packages
Summary
DEBIAN-CVE-2025-40074: In the Linux kernel, the following vulnerability has been resolved: ipv4: start using dst_dev_rcu() Change icmpv4_xrlim_allow(), ip_defrag() to prevent possible UAF. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware and system resources. It provides essential services for all other software running on the system. This vulnerability affects multiple versions of the Linux package across Debian 11 to 14, highlighting the importance of maintaining an updated and secure kernel to prevent exploitation.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified that involves the improper handling of reference counting in the IPv4 protocol stack, specifically in functions such as icmpv4_xrlim_allow() and ip_defrag(). This could lead to a use-after-free (UAF) condition, potentially allowing an attacker to execute arbitrary code or crash the system. The issue arises from the failure to properly manage memory references, which can be exploited if not addressed.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workarounds have been provided for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate the risk.
Conclusion
The identified UAF vulnerability in the Linux kernel poses significant risks to Debian systems. It is crucial for users to stay informed about updates and apply patches promptly to maintain system security. Utilizing tools like Vulert can help monitor vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to arbitrary code execution or crashes.
You can check for vulnerabilities in your Debian system using tools like Vulert, which monitors open-source vulnerabilities in real-time without requiring code access.
This vulnerability affects Debian versions 11, 12, 13, and 14.
Yes, a patch is expected to be released soon. Users should regularly check for updates and apply them promptly.
If immediate updates are not possible, consider isolating the affected system from the network to reduce the risk of exploitation until a patch can be applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
