SB2025111325 - NULL pointer dereference in Linux kernel
Published: November 13, 2025
Security Bulletin ID
SB2025111325
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2025-40178)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the pid_nr_ns() function in kernel/pid.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/006568ab4c5ca2309ceb36fa553e390b4aa9c0c7
- https://git.kernel.org/stable/c/09d227c59d97efda7d5cc878a4335a6b2bb224c2
- https://git.kernel.org/stable/c/2076b916bf41be48799d1443df0f8fc75d12ccd0
- https://git.kernel.org/stable/c/75dbc029c5359438be4a6f908bfbfdab969af776
- https://git.kernel.org/stable/c/a0212978af1825b37da0b453b94d9b0e5af11478
- https://git.kernel.org/stable/c/c2d09d724856b6f82ab688f65fc1ce833bb56333
- https://git.kernel.org/stable/c/c3b654021931dc806ba086c549e8756c3f204a67
- https://git.kernel.org/stable/c/e10c36a771c5cc910abd9fe4aa9033ee32a47c38