vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-40204

sctp: Fix MAC comparison to be constant-time

HIGH
8.1
CVSS Score
Published: November 12, 2025 at 09:56 PM UTC
Updated: October 19, 2026 at 09:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.1
Exploit prediction
EPSS 0.5%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
1da177e4c3f41524e886b7f1b8a0c1fc7321cac22.6.12
Vendor states this is fixed in 0b32ff285ff6f6f1ac1d9495787ccce8837d6405 (fixed)
Vendor states this is fixed in 0e8b8c326c2a6de4d837b1bb034ea704f4690d77 (fixed)
Vendor states this is fixed in 1cd60e0d0fb8f0e62ec4499138afce6342dc9d4c (fixed)
Vendor states this is fixed in 8019b3699289fce3f10b63f98601db97b8d105b0 (fixed)
Vendor states this is fixed in 9c05d44ec24126fc283835b68f82dba3ae985209 (fixed)
Vendor states this is fixed in b93fa8dc521d00d2d44bf034fb90e0d79b036617 (fixed)
Vendor states this is fixed in dd91c79e4f58fbe2898dac84858033700e0e99fb (fixed)
Vendor states this is fixed in ed3044b9c810c5c24eb2830053fbfe5fd134c5d4 (fixed)
Vendor states this is fixed in 2.6.12 (unaffected)
Vendor states this is fixed in 5.10.246 (unaffected)
Vendor states this is fixed in 5.15.195 (unaffected)
Vendor states this is fixed in 5.4.301 (unaffected)
Vendor states this is fixed in 6.1.157 (unaffected)
Vendor states this is fixed in 6.12.54 (unaffected)
Vendor states this is fixed in 6.17.4 (unaffected)
Vendor states this is fixed in 6.18 (unaffected)
Vendor states this is fixed in 6.6.113 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/b93fa8dc521d00d2d44bf034fb90e0d79b036617
Source: cverecord
https://git.kernel.org/stable/c/0e8b8c326c2a6de4d837b1bb034ea704f4690d77
Source: cverecord
https://git.kernel.org/stable/c/1cd60e0d0fb8f0e62ec4499138afce6342dc9d4c
Source: cverecord
https://git.kernel.org/stable/c/9c05d44ec24126fc283835b68f82dba3ae985209
Source: cverecord
https://git.kernel.org/stable/c/ed3044b9c810c5c24eb2830053fbfe5fd134c5d4
Source: cverecord
https://git.kernel.org/stable/c/8019b3699289fce3f10b63f98601db97b8d105b0
Source: cverecord
https://git.kernel.org/stable/c/0b32ff285ff6f6f1ac1d9495787ccce8837d6405
Source: cverecord
https://git.kernel.org/stable/c/dd91c79e4f58fbe2898dac84858033700e0e99fb

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.1HIGHLinux
Vector?

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card