CVE-2025-40279

In the Linux kernel, the following vulnerability has been resolved: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak In tcf_connmark_dump(), the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nla_put() copies the entire structure into a netlink message, these uninitialized bytes leaked to userspace. Initialize the structure with memset before assigning its fields to ensure all members and padding are cleared prior to beign copied.

EPSS

0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-25)

Published

2025-12-06

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

References

• https://git.kernel.org/stable/c/218b67c8c8246d47a2a7910eae80abe4861fe2b7
• https://git.kernel.org/stable/c/25837889ec062f2b7618142cd80253dff3da5343
• https://git.kernel.org/stable/c/31e4aa93e2e5b5647fc235b0f6ee329646878f9e
• https://git.kernel.org/stable/c/51cb05d4fd632596816ba44e882e84db9fb28a7e
• https://git.kernel.org/stable/c/62b656e43eaeae445a39cd8021a4f47065af4389

Check your stackJSON