Use of uninitialized resource in Linux kernel - CVE-2025-40214

Vulnerability identifier: #VU119199

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-40214

CWE-ID: CWE-908

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the unix_add_edge(), __unix_walk_scc() and unix_walk_scc() functions in net/unix/garbage.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
Anolis OS
Ubuntu
kernel-debug-modules
perf
kernel-tools-libs-devel
kernel-tools-libs
kernel-tools
kernel-modules-internal
kernel-modules-extra
kernel-modules
kernel-headers
kernel-devel
kernel-debug-modules-internal
kernel-debug-modules-extra
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-core
kernel
bpftool
python3-perf
linux (Ubuntu package)

Install update from vendor's repository.

kernel-debug-modules - update to 5.10.134-19.3
perf - addressed in versions 5.10.134-19.3, 6.6.102-6
kernel-tools-libs-devel - addressed in versions 5.10.134-19.3, 6.6.102-6
kernel-tools-libs - addressed in versions 5.10.134-19.3, 6.6.102-6
kernel-tools - addressed in versions 5.10.134-19.3, 6.6.102-6
kernel-modules-internal - update to 5.10.134-19.3
kernel-modules-extra - update to 5.10.134-19.3
kernel-modules - update to 5.10.134-19.3
kernel-headers - addressed in versions 5.10.134-19.3, 6.6.102-6
kernel-devel - addressed in versions 5.10.134-19.3, 6.6.102-6
kernel-debug-modules-internal - update to 5.10.134-19.3
kernel-debug-modules-extra - update to 5.10.134-19.3
kernel-debug-devel - addressed in versions 5.10.134-19.3, 6.6.102-6
kernel-debug-core - update to 5.10.134-19.3
kernel-debug - addressed in versions 5.10.134-19.3, 6.6.102-6
kernel-core - update to 5.10.134-19.3
kernel - addressed in versions 5.10.134-19.3, 6.6.102-6
bpftool - addressed in versions 5.10.134-19.3, 6.6.102-6
python3-perf - addressed in versions 5.10.134-19.3, 6.6.102-6
linux (Ubuntu package) - addressed in versions 6.17.0-12.12, 6.17.0-1005.6, 6.17.0-1006.6, 6.17.0-1007.7, 6.17.0-1010.10

• https://git.kernel.org/stable/c/1aa7e40ee850c9053e769957ce6541173891204d
• https://git.kernel.org/stable/c/4cd8d755c7d4f515dd9abf483316aca2f1b7b0f3
• https://git.kernel.org/stable/c/60e6489f8e3b086bd1130ad4450a2c112e863791
• https://git.kernel.org/stable/c/db81ad20fd8aef7cc7d536c52ee5ea4c1f979128

• Use of uninitialized resource in Linux kernel unix
• Ubuntu update for linux
• Anolis OS update for kernel:5.10
• Anolis OS update for kernel:6.6