{
  "cveId": "CVE-2025-40779",
  "url": "https://patchblox.com/security/cve/CVE-2025-40779",
  "summary": "CVE-2025-40779 is fixed in 5 products on 1 platform, first by RHSA-2025:21006, released August 27, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "kea: If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the cl...",
  "description": "If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the \u0060kea-dhcp4\u0060 process will abort with an assertion failure.  This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem.\nThis issue affects Kea versions 2.7.1 through 2.7.9, 3.0.0, and 3.1.0.",
  "published": "2025-08-27T20:23:29Z",
  "severity": "important",
  "cvss": 7.5,
  "epss": 0.00539,
  "epssPercentile": 0.45595,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kea",
      "release": "RHEL 10",
      "fixedVersion": "3.0.1-1.el10_1",
      "fix": "RHSA-2025:21006",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-21006",
      "released": "2025-08-27T20:23:29Z"
    },
    {
      "platform": "linux",
      "product": "kea",
      "release": "ol 10",
      "fixedVersion": "0:3.0.1-2.el10_1",
      "fix": "ELSA-2025-21006",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-21006",
      "released": "2025-12-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kea",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "3.0.1-160000.1.1",
      "fix": "OPENSUSE-SU-2026:20341-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20341-1",
      "released": "2026-03-11T08:51:21Z"
    },
    {
      "platform": "linux",
      "product": "kea-doc",
      "release": "ol 10",
      "fixedVersion": "0:3.0.1-2.el10_1",
      "fix": "ELSA-2025-21006",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-21006",
      "released": "2025-12-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kea-hooks",
      "release": "ol 10",
      "fixedVersion": "0:3.0.1-2.el10_1",
      "fix": "ELSA-2025-21006",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-21006",
      "released": "2025-12-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kea-keama",
      "release": "ol 10",
      "fixedVersion": "0:3.0.1-2.el10_1",
      "fix": "ELSA-2025-21006",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-21006",
      "released": "2025-12-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kea-libs",
      "release": "ol 10",
      "fixedVersion": "0:3.0.1-2.el10_1",
      "fix": "ELSA-2025-21006",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-21006",
      "released": "2025-12-03T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}