ZeroHour

CVE-2025-40236

CVSS
EPSS
<1%p8
Published
()
Modified
Description

In the Linux kernel, the following vulnerability has been resolved: virtio-net: zero unused hash fields When GSO tunnel is negotiated virtio_net_hdr_tnl_from_skb() tries to initialize the tunnel metadata but forget to zero unused rxhash fields. This may leak information to another side. Fixing this by zeroing the unused hash fields.

In the news

No ingested article mentions this CVE yet.