{
  "cveId": "CVE-2025-40012",
  "url": "https://patchblox.com/security/cve/CVE-2025-40012",
  "summary": "CVE-2025-40012 is fixed in 18 products on 1 platform, first by DEBIAN-CVE-2025-40012, released October 20, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/smc: fix warning in smc_rx_splice() when cal...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net/smc: fix warning in smc_rx_splice() when calling get_page()  smc_lo_register_dmb() allocates DMB buffers with kzalloc(), which are later passed to get_page() in smc_rx_splice(). Since kmalloc memory is not page-backed, this triggers WARN_ON_ONCE() in get_page() and prevents holding a refcount on the buffer. This can lead to use-after-free if the memory is released before splice_to_pipe() completes.  Use folio_alloc() instead, ensuring DMBs are page-backed and safe for get_page().  WARNING: CPU: 18 PID: 12152 at ./include/linux/mm.h:1330 smc_rx_splice\u002B0xaf8/0xe20 [smc] CPU: 18 UID: 0 PID: 12152 Comm: smcapp Kdump: loaded Not tainted 6.17.0-rc3-11705-g9cf4672ecfee #10 NONE Hardware name: IBM 3931 A01 704 (z/VM 7.4.0) Krnl PSW : 0704e00180000000 000793161032696c (smc_rx_splice\u002B0xafc/0xe20 [smc])            R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:2 PM:0 RI:0 EA:3 Krnl GPRS: 0000000000000000 001cee80007d3001 00077400000000f8 0000000000000005            0000000000000001 001cee80007d3006 0007740000001000 001c000000000000            000000009b0c99e0 0000000000001000 001c0000000000f8 001c000000000000            000003ffcc6f7c88 0007740003e98000 0007931600000005 000792969b2ff7b8 Krnl Code: 0007931610326960: af000000\t\tmc\t0,0            0007931610326964: a7f4ff43\t\tbrc\t15,00079316103267ea           #0007931610326968: af000000\t\tmc\t0,0           \u003E000793161032696c: a7f4ff3f\t\tbrc\t15,00079316103267ea            0007931610326970: e320f1000004\tlg\t%r2,256(%r15)            0007931610326976: c0e53fd1b5f5\tbrasl\t%r14,000793168fd5d560            000793161032697c: a7f4fbb5\t\tbrc\t15,00079316103260e6            0007931610326980: b904002b\t\tlgr\t%r2,%r11 Call Trace:  smc_rx_splice\u002B0xafc/0xe20 [smc]  smc_rx_splice\u002B0x756/0xe20 [smc])  smc_rx_recvmsg\u002B0xa74/0xe00 [smc]  smc_splice_read\u002B0x1ce/0x3b0 [smc]  sock_splice_read\u002B0xa2/0xf0  do_splice_read\u002B0x198/0x240  splice_file_to_pipe\u002B0x7e/0x110  do_splice\u002B0x59e/0xde0  __do_splice\u002B0x11a/0x2d0  __s390x_sys_splice\u002B0x140/0x1f0  __do_syscall\u002B0x122/0x280  system_call\u002B0x6e/0x90 Last Breaking-Event-Address: smc_rx_splice\u002B0x960/0xe20 [smc] ---[ end trace 0000000000000000 ]---",
  "published": "2025-10-20T16:15:37Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00193,
  "epssPercentile": 0.09028,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.18.1",
      "fix": "SUSE-SU-2025:4132-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4132-1",
      "released": "2025-11-18T16:45:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1.160000.2.4",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1.150700.17.15.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1.160000.2.4",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_6",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.3.1",
      "fix": "SUSE-SU-2025:4141-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4141-1",
      "released": "2025-11-19T14:06:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7_Update_6",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.18.1",
      "fix": "SUSE-SU-2025:4132-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4132-1",
      "released": "2025-11-18T16:45:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.18.1",
      "fix": "SUSE-SU-2025:4132-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4132-1",
      "released": "2025-11-18T16:45:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.57-1",
      "fix": "DEBIAN-CVE-2025-40012",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40012",
      "released": "2025-10-20T16:15:37Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.16.10-1",
      "fix": "DEBIAN-CVE-2025-40012",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40012",
      "released": "2025-10-20T16:15:37Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}