Linux Kernel xfrm Tunnel Management Vulnerability Affecting Networking Functionality
CVE-2025-40256

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 4 December 2025

What is CVE-2025-40256?

A resource management issue in the Linux kernel concerning xfrm state operations has been identified. The vulnerability arises when state creation fails between initialization and insertion into the lists, leading to leaks in fallback tunnels for IPsec protocols. Specifically, the failure to call necessary cleanup routines when certain user states are not added creates security risks by leaving tunnel resources allocated and unguarded. This flaw affects various code paths pertaining to state management, including add/update actions within net/key and xfrm modules, as well as in migration processes. Properly addressing this issue involves ensuring that xfrm_state_delete_tunnel is invoked during the garbage collection of states, thus preventing rogue or orphaned tunnels from persisting and enhancing overall network resilience.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch