Security Advisory
CVE-2025-40236
N/A
UNKNOWN
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: zero unused hash fields
When GSO tunnel is negotiated virtio_net_hdr_tnl_from_skb() tries to
initialize the tunnel metadata but forget to zero unused rxhash
fields. This may leak information to another side. Fixing this by
zeroing the unused hash fields.
Published Date
December 4, 2025
Official Source
NIST NVD Advisory