CVE-2025-40187

kernel: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()

Loading…

Severity

Moderate

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · November 12, 2025

Updated · August 14, 2026

Description

A flaw was found in the Stream Control Transmission Protocol (SCTP) implementation of the Linux kernel. Under specific conditions related to the sctp_ulpevent_make_authkey() function, a NULL pointer dereference can occur. This vulnerability could allow an attacker to cause a system crash, leading to a denial of service.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference