Security Advisory
CVE-2025-40080
N/A
UNKNOWN
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
nbd: restrict sockets to TCP and UDP
Recently, syzbot started to abuse NBD with all kinds of sockets.
Commit cf1b2326b734 ("nbd: verify socket is supported during setup")
made sure the socket supported a shutdown() method.
Explicitely accept TCP and UNIX stream sockets.
Published Date
October 28, 2025
Official Source
NIST NVD Advisory