Race Condition in MultiPath TCP Implementation of Linux Kernel
CVE-2025-40257

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 4 December 2025

What is CVE-2025-40257?

A vulnerability in the Linux Kernel's MultiPath TCP (MPTCP) component could lead to a race condition during timer management. The function handling timer deletions, 'mptcp_pm_del_add_timer', may interact incorrectly with other processes, potentially leading to a use-after-free scenario. This could result in unpredictable behavior or crashes. The issue has been addressed by implementing RCU protection and clarifying variable names for better code readability. Users are encouraged to update their systems to incorporate these security improvements.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch