CVE-2025-40264
In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is called with the wrb_params argument being NULL at be_send_pkt_to_bmc() call site. This may lead to dereferencing a NULL pointer when processing a workaround for specific packet, as commit bc0c3405abbb ("be2net: fix a Tx stall bug caused by a specific ipv6 packet") states. The correct way would be to pass the wrb_params from be_xmit().
Affected versions
Linux kernel versions
4.2
and later are affected. Fixed in
5.4.302,
5.10.247,
5.15.197,
6.1.159,
6.6.118,
6.12.60,
6.17.10,
6.18
and their respective stable series.
References
The following references provide additional information about CVE-2025-40264 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
-
PatchKernel patch commithttps://git.kernel.org/stable/c/012ee5882b1830db469194466a210768ed207388
-
PatchKernel patch commithttps://git.kernel.org/stable/c/1ecd86ec6efddb59a10c927e8e679f183bb9113e
-
PatchKernel patch commithttps://git.kernel.org/stable/c/48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfe
Frequently asked questions
-
What is CVE-2025-40264?
CVE-2025-40264 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 4.2 onward and has been patched in 5.4.302, 5.10.247, 5.15.197 and others. CVE-2025-40264 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2025-40264?
Yes — CVE-2025-40264 has been patched. Fixed versions include 5.4.302, 5.10.247, 5.15.197 and others. If you are running Linux kernel 4.2 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2025-40264 actively exploited?
No — CVE-2025-40264 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.