Answer in brief
CVE-2025-40080 records a Unknown severity vulnerability in nbd: restrict sockets to TCP and UDP. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=cf1b2326b734896734c6e167e41766f9cee7686a <c365e8f20f4201d873a70385bd919f0fb531e960 || >=cf1b2326b734896734c6e167e41766f9cee7686a <4f9e6ff6319dbcebea64b50af0304cf0ad7e97e7 || >=cf1b2326b734896734c6e167e41766f9cee7686a <37ad11f20e164c23ce827dd455b42c0fdd29685c || >=cf1b2326b734896734c6e167e41766f9cee7686a <808e2335bc1cf2293b9e36ccc94c267c81509c71 || >=cf1b2326b734896734c6e167e41766f9cee7686a <9f7c02e031570e8291a63162c6c046dc15ff85b0 || 4df728651b8a99693c69962d8e5a5b9e5a3bbcc7 || 083322455c67d278c56a66b73f1221f004ee600a || 4fa1cbd587ef967812f9d9f6ce46ec1dead7502c || >=4.14.152 <4.15 || >=4.19.82 <4.20 || >=5.3.9 <5.4 | c365e8f20f4201d873a70385bd919f0fb531e960, 4f9e6ff6319dbcebea64b50af0304cf0ad7e97e7, 37ad11f20e164c23ce827dd455b42c0fdd29685c, 808e2335bc1cf2293b9e36ccc94c267c81509c71, 9f7c02e031570e8291a63162c6c046dc15ff85b0, 4.15, 4.20, 5.4 |
| Linux/Linuxgeneric | 5.4 | Not reported |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
Published upstream
Oct 28, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jul 14, 2026
In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 ("nbd: verify socket is supported during setup") made sure the socket supported a shutdown() method. Explicitely accept TCP and UNIX stream sockets.
Quoted source text, attributed separately from HOL analysis.