CVE-2025-40080

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel had a flaw in the Network Block Device (NBD) module where it permitted the use of various socket types, leading to potential abuse. Specifically, a testing tool named syzbot exploited NBD using unsupported socket types. A previous commit aimed to ensure sockets supported a shutdown method, but did not fully restrict the allowed socket types. The issue was addressed by explicitly accepting only TCP and UNIX stream sockets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.