Answer in brief
CVE-2025-40135 records a Unknown severity vulnerability in ipv6: use RCU in ip6_xmit(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 <f0a54d00d2f36de40266f47c27989853e8588656 || >=4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 <f69fec6287565fdeb61f65e700a1184352306943 || >=4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 <bd0905e2122e3680968cd0741966983490bf2ed3 || >=4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 <f7f9e924f23684b4b23cd9f976cceab24a968e34 || >=4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 <9085e56501d93af9f2d7bd16f7fcfacdde47b99c | f0a54d00d2f36de40266f47c27989853e8588656, f69fec6287565fdeb61f65e700a1184352306943, bd0905e2122e3680968cd0741966983490bf2ed3, f7f9e924f23684b4b23cd9f976cceab24a968e34, 9085e56501d93af9f2d7bd16f7fcfacdde47b99c |
| Linux/Linuxgeneric | 4.13 | Not reported |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
Published upstream
Nov 12, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jul 14, 2026
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.
Quoted source text, attributed separately from HOL analysis.