#VU118486 NULL pointer dereference in Linux kernel - CVE-2025-40178
Published: November 13, 2025
Vulnerability identifier: #VU118486
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2025-40178
CWE-ID: CWE-476
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
Linux kernel
Linux kernel
Software vendor:
Linux Foundation
Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the pid_nr_ns() function in kernel/pid.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's repository.
External links
- https://git.kernel.org/stable/c/006568ab4c5ca2309ceb36fa553e390b4aa9c0c7
- https://git.kernel.org/stable/c/09d227c59d97efda7d5cc878a4335a6b2bb224c2
- https://git.kernel.org/stable/c/2076b916bf41be48799d1443df0f8fc75d12ccd0
- https://git.kernel.org/stable/c/75dbc029c5359438be4a6f908bfbfdab969af776
- https://git.kernel.org/stable/c/a0212978af1825b37da0b453b94d9b0e5af11478
- https://git.kernel.org/stable/c/c2d09d724856b6f82ab688f65fc1ce833bb56333
- https://git.kernel.org/stable/c/c3b654021931dc806ba086c549e8756c3f204a67
- https://git.kernel.org/stable/c/e10c36a771c5cc910abd9fe4aa9033ee32a47c38