CVE-2025-40075

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: use dst_dev_net_rcu()

Replace three dst_dev() with a lockdep enabled helper.

This change replaces dst_dev() with the RCU-safe helper dst_dev_net_rcu() to avoid potential race conditions when accessing the device pointer behind a dst_entry. There is no practical exploit path: the old behavior did not expose a reachable crash or memory corruption to unprivileged users, as the logic executes only in kernel TCP metrics management under RCU protection.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.