CVE Database›CVE-2025-40236

CVE-2025-40236

kernel: virtio-net: zero unused hash fields

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · December 4, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

virtio-net: zero unused hash fields

When GSO tunnel is negotiated virtio_net_hdr_tnl_from_skb() tries to initialize the tunnel metadata but forget to zero unused rxhash fields. This may leak information to another side. Fixing this by zeroing the unused hash fields.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified