CVE-2025-40236
04.12.2025, 16:16
In the Linux kernel, the following vulnerability has been resolved: virtio-net: zero unused hash fields When GSO tunnel is negotiated virtio_net_hdr_tnl_from_skb() tries to initialize the tunnel metadata but forget to zero unused rxhash fields. This may leak information to another side. Fixing this by zeroing the unused hash fields.Enginsight
Awaiting analysis
This vulnerability is currently awaiting analysis.
Debian Releases