CVE-2025-40149 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Published for SMC and TLS Vulnerabilities On November 12, 2025, four Common Vulnerabilities and Exposures (CVEs) were published, affecting the SMC and TLS protocols. The vulnerabilities include CVE-2025-40139, CVE-2025-40168, CVE-2025-40170, and CVE-2025-40149, all of which involve the use of functions like __sk_dst_get() and dst_dev_rcu() in various networking contexts. These vulnerabilities could impact systems utilizing these protocols, necessitating prompt attention from affected users. 4 sources 47