CVE-2025-40236
kernel: virtio-net: zero unused hash fields
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · December 4, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: zero unused hash fields
When GSO tunnel is negotiated virtio_net_hdr_tnl_from_skb() tries to initialize the tunnel metadata but forget to zero unused rxhash fields. This may leak information to another side. Fixing this by zeroing the unused hash fields.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified