Improper Validation in Linux Kernel NBD Affects TCP and UDP Sockets

CVE-2025-40080

What is CVE-2025-40080?

A vulnerability in the Linux kernel's Network Block Device (NBD) component allows for the improper handling of socket types. Exploited by syzbot, it abuses socket interactions that were not initially restricted. A recent commit has been made to ensure that only TCP and UNIX stream sockets are accepted, verifying that the socket supports a shutdown() method. This change bolsters network safety by mitigating unauthorized socket types and establishing stricter controls over socket usage during the setup process.

References