Cloudanix VulnDB

CVE-2025-40176

None

CVSS

—

EPSS

0.5%

Published

Nov 12, 2025

CISA due date

—

The record

In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_msg_hold to create a clone of the input skb to hold references to the memory it uses. If we fail to allocate that clone, proceeding with async decryption can lead to various issues (UAF on the skb, writing into userspace memory after the recv() call has returned). In this case, wait for all pending decryption requests.

Affected packages

Ecosystem Package Introduced Fixed
AlmaLinux:10 kernel 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-debug 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-debug-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-debug-devel 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-debug-devel-matched 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-debug-modules 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-debug-modules-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-debug-modules-extra 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-devel 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-devel-matched 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-modules 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-modules-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-64k-modules-extra 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-abi-stablelists 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-cross-headers 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-debug 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-debug-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-debug-devel 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-debug-devel-matched 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-debug-modules 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-debug-modules-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-debug-modules-extra 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-debug-uki-virt 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-devel 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-devel-matched 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-doc 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-headers 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-modules 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-modules-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-modules-extra 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-modules-extra-matched 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug-devel 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug-modules 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug-modules-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug-modules-extra 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k-devel 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k-modules 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k-modules-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-64k-modules-extra 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-debug 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-debug-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-debug-devel 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-debug-modules 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-debug-modules-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-debug-modules-extra 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-devel 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-modules 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-modules-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-rt-modules-extra 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-tools 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-tools-libs 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-tools-libs-devel 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-uki-virt 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-uki-virt-addons 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-zfcpdump 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-zfcpdump-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-zfcpdump-devel 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-zfcpdump-devel-matched 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-zfcpdump-modules 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-zfcpdump-modules-core 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 kernel-zfcpdump-modules-extra 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 libperf 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 perf 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 python3-perf 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 rtla 0 6.12.0-124.27.1.el10_1
AlmaLinux:10 rv 0 6.12.0-124.27.1.el10_1
AlmaLinux:9 kernel 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-debug 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-debug-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-debug-devel 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-debug-devel-matched 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-debug-modules 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-debug-modules-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-debug-modules-extra 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-devel 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-devel-matched 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-modules 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-modules-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-64k-modules-extra 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-abi-stablelists 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-cross-headers 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-debug 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-debug-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-debug-devel 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-debug-devel-matched 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-debug-modules 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-debug-modules-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-debug-modules-extra 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-debug-uki-virt 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-devel 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-devel-matched 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-doc 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-headers 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-modules 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-modules-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-modules-extra 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug-devel 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug-modules 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug-modules-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug-modules-extra 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k-devel 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k-modules 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k-modules-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-64k-modules-extra 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-debug 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-debug-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-debug-devel 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-debug-modules 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-debug-modules-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-debug-modules-extra 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-devel 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-modules 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-modules-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-rt-modules-extra 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-tools 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-tools-libs 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-tools-libs-devel 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-uki-virt 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-uki-virt-addons 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-zfcpdump 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-zfcpdump-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-zfcpdump-devel 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-zfcpdump-devel-matched 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-zfcpdump-modules 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-zfcpdump-modules-core 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 kernel-zfcpdump-modules-extra 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 libperf 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 perf 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 python3-perf 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 rtla 0 5.14.0-611.16.1.el9_7
AlmaLinux:9 rv 0 5.14.0-611.16.1.el9_7
Linux Kernel 6.0.0 6.1.158
SUSE:Linux Enterprise High Availability Extension 15 SP6 kernel-default 0 6.4.0-150600.23.81.3
SUSE:Linux Enterprise Live Patching 15 SP6 kernel-default 0 6.4.0-150600.23.81.3
SUSE:Linux Enterprise Live Patching 15 SP6 kernel-livepatch-SLE15-SP6-RT_Update_18 0 1-150600.1.3.1
SUSE:Linux Enterprise Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_18 0 1-150600.13.3.3
SUSE:Linux Enterprise Module for Basesystem 15 SP6 kernel-64kb 0 6.4.0-150600.23.81.3
SUSE:Linux Enterprise Module for Basesystem 15 SP6 kernel-default 0 6.4.0-150600.23.81.3
SUSE:Linux Enterprise Module for Basesystem 15 SP6 kernel-default-base 0 6.4.0-150600.23.81.3.150600.12.36.3
SUSE:Linux Enterprise Module for Basesystem 15 SP6 kernel-source 0 6.4.0-150600.23.81.2
SUSE:Linux Enterprise Module for Basesystem 15 SP6 kernel-zfcpdump 0 6.4.0-150600.23.81.3
SUSE:Linux Enterprise Module for Development Tools 15 SP6 kernel-docs 0 6.4.0-150600.23.81.1
SUSE:Linux Enterprise Module for Development Tools 15 SP6 kernel-obs-build 0 6.4.0-150600.23.81.3
SUSE:Linux Enterprise Module for Development Tools 15 SP6 kernel-source 0 6.4.0-150600.23.81.2
SUSE:Linux Enterprise Module for Development Tools 15 SP6 kernel-syms 0 6.4.0-150600.23.81.1
SUSE:Linux Enterprise Module for Legacy 15 SP6 kernel-default 0 6.4.0-150600.23.81.3
SUSE:Linux Enterprise Module for Public Cloud 15 SP6 kernel-azure 0 6.4.0-150600.8.58.1
SUSE:Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure 0 6.4.0-150600.8.58.1
SUSE:Linux Enterprise Module for Public Cloud 15 SP6 kernel-syms-azure 0 6.4.0-150600.8.58.1
SUSE:Linux Enterprise Workstation Extension 15 SP6 kernel-default 0 6.4.0-150600.23.81.3
SUSE:Real Time Module 15 SP6 kernel-rt 0 6.4.0-150600.10.61.1
SUSE:Real Time Module 15 SP6 kernel-rt_debug 0 6.4.0-150600.10.61.1
SUSE:Real Time Module 15 SP6 kernel-source-rt 0 6.4.0-150600.10.61.1
SUSE:Real Time Module 15 SP6 kernel-syms-rt 0 6.4.0-150600.10.61.1
openSUSE:Leap 15.6 dtb-aarch64 0 6.4.0-150600.23.81.1
openSUSE:Leap 15.6 kernel-64kb 0 6.4.0-150600.23.81.3
openSUSE:Leap 15.6 kernel-azure 0 6.4.0-150600.8.58.1
openSUSE:Leap 15.6 kernel-debug 0 6.4.0-150600.23.81.3
openSUSE:Leap 15.6 kernel-default 0 6.4.0-150600.23.81.3
openSUSE:Leap 15.6 kernel-default-base 0 6.4.0-150600.23.81.3.150600.12.36.3
openSUSE:Leap 15.6 kernel-docs 0 6.4.0-150600.23.81.1
openSUSE:Leap 15.6 kernel-kvmsmall 0 6.4.0-150600.23.81.3
openSUSE:Leap 15.6 kernel-obs-build 0 6.4.0-150600.23.81.3
openSUSE:Leap 15.6 kernel-obs-qa 0 6.4.0-150600.23.81.1
openSUSE:Leap 15.6 kernel-rt 0 6.4.0-150600.10.61.1
openSUSE:Leap 15.6 kernel-rt_debug 0 6.4.0-150600.10.61.1
openSUSE:Leap 15.6 kernel-source 0 6.4.0-150600.23.81.2
openSUSE:Leap 15.6 kernel-source-azure 0 6.4.0-150600.8.58.1
openSUSE:Leap 15.6 kernel-source-rt 0 6.4.0-150600.10.61.1
openSUSE:Leap 15.6 kernel-syms 0 6.4.0-150600.23.81.1
openSUSE:Leap 15.6 kernel-syms-azure 0 6.4.0-150600.8.58.1
openSUSE:Leap 15.6 kernel-syms-rt 0 6.4.0-150600.10.61.1
openSUSE:Leap 15.6 kernel-zfcpdump 0 6.4.0-150600.23.81.3
openSUSE:Leap 16.0 dtb-aarch64 0 6.12.0-160000.8.1
openSUSE:Leap 16.0 kernel-64kb 0 6.12.0-160000.8.1
openSUSE:Leap 16.0 kernel-default 0 6.12.0-160000.8.1
openSUSE:Leap 16.0 kernel-default-base 0 6.12.0-160000.8.1.160000.2.5
openSUSE:Leap 16.0 kernel-docs 0 6.12.0-160000.8.1
openSUSE:Leap 16.0 kernel-kvmsmall 0 6.12.0-160000.8.1
openSUSE:Leap 16.0 kernel-obs-build 0 6.12.0-160000.8.1
openSUSE:Leap 16.0 kernel-obs-qa 0 6.12.0-160000.8.1
openSUSE:Leap 16.0 kernel-rt 0 6.12.0-160000.8.1

Related vulnerabilities