CVE-2025-40010

CVE-2025-40010

published October 20, 2025

CVSS
—
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix potential null pointer dereference in afs_put_server

afs_put_server() accessed server->debug_id before the NULL check, which

could lead to a null pointer dereference. Move the debug_id assignment,

ensuring we never dereference a NULL server pointer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00246 · 15.0th percentile
Published
2025-10-20T20:15Z
References (5)
https://git.kernel.org/stable/c/41782c44bb8431c43043129ae42f2ba614938479 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7b8381f3c405b864a814d747e526e078c3ef4bc2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9158c6bb245113d4966df9b2ba602197a379412e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a13dbc5e20c7284b82afe6f08debdecf51d2ca04 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/cab278cead49a547ac84c3e185f446f381303eae · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 20 OCT 15:26Z
    afs: Fix potential null pointer dereference in afs_put_server
    cvelistv5