Log in Start free

Vulnerability · Published Nov 12, 2025 · Assigned by Linux

CVE-2025-40176tls: wait for pending async decryptions if tls_strp_msg_hold fails

Critical 9.8

In plain English

A critical-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.5%top 57.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_msg_hold to create a clone of the input skb to hold references to the memory it uses. If we fail to allocate that clone, proceeding with async decryption can lead to various issues (UAF on the skb, writing into userspace memory after the recv() call has returned). In this case, wait for all pending decryption requests.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9kernel5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-debug5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-debug-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-debug-devel5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-debug-modules5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-devel5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-devel-matched5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-modules5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-modules-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-64k-modules-extra5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:10kernel-abi-stablelists6.12.0-124.27.1.el10_1ALSA-2026:0453
AlmaLinux:9kernel-abi-stablelists5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-cross-headers5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-debug5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-debug-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-debug-devel5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-debug-devel-matched5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-debug-modules5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-debug-modules-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-debug-modules-extra5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-debug-uki-virt5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-devel5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-devel-matched5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:10kernel-doc6.12.0-124.27.1.el10_1ALSA-2026:0453
AlmaLinux:9kernel-doc5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-headers5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-modules5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-modules-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-modules-extra5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k-debug5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k-debug-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k-debug-devel5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k-debug-modules5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k-debug-modules-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k-debug-modules-extra5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k-devel5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k-modules5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k-modules-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-64k-modules-extra5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-debug5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-debug-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-debug-devel5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-debug-modules5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-devel5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-modules5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-modules-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-rt-modules-extra5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-tools5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-tools-libs5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-tools-libs-devel5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-uki-virt5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-uki-virt-addons5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-zfcpdump5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-zfcpdump-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-zfcpdump-devel5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-zfcpdump-modules5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9libperf5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9perf5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9python3-perf5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9rtla5.14.0-611.16.1.el9_7ALSA-2025:23241
AlmaLinux:9rv5.14.0-611.16.1.el9_7ALSA-2025:23241
Debian:12linux6.1.158-1DEBIAN-CVE-2025-40176
Debian:13linux6.12.57-1DEBIAN-CVE-2025-40176
Debian:14linux6.17.6-1DEBIAN-CVE-2025-40176
Rocky Linux:10kernel0:6.12.0-124.27.1.el10_1RLSA-2026:0453
Rocky Linux:9kernel0:5.14.0-611.16.1.el9_7RLSA-2025:23241
Ubuntu:24.04:LTSlinux6.8.0-106.106UBUNTU-CVE-2025-40176
Ubuntu:25.10linux6.17.0-14.14UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-aws6.8.0-1050.53UBUNTU-CVE-2025-40176
Ubuntu:25.10linux-aws6.17.0-1007.7UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1007.7~24.04.1UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1050.53~22.04.1UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-azure6.8.0-1051.57UBUNTU-CVE-2025-40176
Ubuntu:25.10linux-azure6.17.0-1008.8UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2025-40176
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-gcp6.8.0-1052.55UBUNTU-CVE-2025-40176
Ubuntu:25.10linux-gcp6.17.0-1007.7UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1008.8~24.04.1UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1052.55~22.04.1UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-gke6.8.0-1048.53UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1035.38UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-106.106~22.04.1UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-ibm6.8.0-1049.49UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1049.49~22.04.1UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-106.106.1UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-106.106.1~22.04.1UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1049.52UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1008.8UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1049.52~22.04.1UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1049.52.1UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1020.20UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1011.11UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-oracle6.8.0-1047.48UBUNTU-CVE-2025-40176
Ubuntu:25.10linux-oracle6.17.0-1007.7UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1007.7~24.04.1UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1047.48~22.04.1UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-raspi6.8.0-1050.54UBUNTU-CVE-2025-40176
Ubuntu:25.10linux-raspi6.17.0-1008.8UBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-40176
Ubuntu:25.10linux-realtime6.17.0-1006.7UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-40176
Ubuntu:25.10linux-riscv6.17.0-14.14.1UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-106.106~22.04.1UBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-40176
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-40176
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1028.29UBUNTU-CVE-2025-40176

Affected products (as reported)

VendorProductVersions
Linux Linux 84c61fe1a75b4255df1e1e7c054c9e6d048da417 – before 9f83fd0c179e0f458e824e417f9d5ad53443f68584c61fe1a75b4255df1e1e7c054c9e6d048da417 – before c61d4368197d65c4809d9271f3b85325a600586a84c61fe1a75b4255df1e1e7c054c9e6d048da417 – before 39dec4ea3daf77f684308576baf483b55ca7f16084c61fe1a75b4255df1e1e7c054c9e6d048da417 – before 4fc109d0ab196bd943b7451276690fb6bb48c2e084c61fe1a75b4255df1e1e7c054c9e6d048da417 – before b8a6ff84abbcbbc445463de58704686011edc8e1
Linux Linux 6.0

References