CVE-2025-40010

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s AFS subsystem where a null pointer dereference could occur within the afs put server() function. Specifically, the function accessed server->debug id before verifying that the server pointer was not NULL. This could lead to a system crash or other undefined behavior. The issue was addressed by moving the assignment of debug id, ensuring a NULL server pointer is never dereferenced.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.