Memory Handling Flaw in Linux Kernel Affecting Asynchronous Decryption Process

CVE-2025-40176

What is CVE-2025-40176?

A flaw has been identified in the Linux kernel's handling of asynchronous decryption processes. The issue arises during the operation of the tls_strp_msg_hold function, which is responsible for cloning input socket buffers (skbs) to manage memory references during decryption. If the system fails to allocate the required buffer clone, it can lead to serious issues, including use-after-free situations and potential unauthorized access to user space memory following the recv() syscall. This vulnerability emphasizes the importance of managing pending decryption requests effectively, ensuring all dependences are resolved before proceeding.

References