CVE-2025-40183

一、漏洞信息
 漏洞编号：[CVE-2025-40183](https://nvd.nist.gov/vuln/detail/CVE-2025-40183)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.4.0,6.6.0
 CVSS V4.0分值：
  BaseScore：N/A None
  Vector：
 漏洞简述：
  In the Linux kernel, a memory leak vulnerability exists. Cilium s BPF egress gateway feature redirects K8s Pod traffic through vxlan tunnels to dedicated egress gateways. When using the bpf_redirect_neigh() helper to forward packets, vxlan allocates metadata_dst objects and attaches them to skb through fake dst entries. However, since bpf_redirect_neigh() only sets new dst entries without first dropping existing ones, the metadata_dst objects are never released, causing continuous increase in kmalloc-256 slab usage.
 漏洞公开时间：2025-11-13 06:15:45
 漏洞创建时间：2025-11-13 06:11:46
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-40183
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40204 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40200 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38705 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40055 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2023-53321 |  |
|  | https://git.kernel.org/stable/c/3fba965a9aac0fa3cbd8138436a37af9ab466d79 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40141 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-37828 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-39694 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38011 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40110 |  |
|  | https://git.kernel.org/stable/c/f36a305d30f557306d87c787ddffe094ac5dac89 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40082 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40134 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40169 |  |
|  | https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2765 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40179 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40120 |  |
|  | https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2769 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40192 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38729 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40171 |  |
|  | https://lore.kernel.org/linux-cve-announce/2025111243-CVE-2025-40183-fb2f@gregkh/T |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40178 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40125 |  |
|  | https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2764 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40129 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40187 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-21915 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40183 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40164 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-39703 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38234 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40035 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40140 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-22121 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40019 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40211 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38349 |  |
|  | https://git.kernel.org/stable/c/2e67c2037382abb56497bb9d7b7e10be04eb5598 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38214 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40048 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40201 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38100 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-37839 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40109 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-37891 |  |
|  | https://git.kernel.org/stable/c/b6bfe44b6dbb14a31d86c475cdc9c7689534fb09 |  |
|  | https://git.kernel.org/stable/c/057764172fcc6ee2ccb6c41351a55a9f054dc8fd |  |
|  | https://git.kernel.org/stable/c/7404ce888a45eb7da0508b7cbbe6f2e95302eeb8 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-39964 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-37785 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-39931 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-39940 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2414709 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40176 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38173 |  |
|  | https://www.cve.org/CVERecord?id=CVE-2025-40183 |  |
|  | https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2766 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40123 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38084 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40088 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-39751 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40084 |  |
|  | https://lore.kernel.org/linux-cve-announce/2025111243-CVE-2025-40183-fb2f@gregkh/T/#u |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38581 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40167 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40194 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40173 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-37812 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40190 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2024-36357 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40198 |  |
|  | https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2767 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-39938 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40153 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40053 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-23150 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-22080 |  |
|  | https://git.kernel.org/stable/c/23f3770e1a53e6c7a553135011f547209e141e72 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40202 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-37863 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40206 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38717 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-39692 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40012 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-40043 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-39992 |  |
|  | https://security-tracker.debian.org/tracker/CVE-2025-40183 |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  七彩瞬析开源风险感知平台
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
| gregkh/linux |  | https://git.kernel.org/stable/c/3fba965a9aac0fa3cbd8138436a37af9ab466d79 |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/057764172fcc6ee2ccb6c41351a55a9f054dc8fd |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/2e67c2037382abb56497bb9d7b7e10be04eb5598 |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/b6bfe44b6dbb14a31d86c475cdc9c7689534fb09 |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/f36a305d30f557306d87c787ddffe094ac5dac89 |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/7404ce888a45eb7da0508b7cbbe6f2e95302eeb8 |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/23f3770e1a53e6c7a553135011f547209e141e72 |  | ljqc |
|  |  | https://git.kernel.org/stable/c/3fba965a9aac0fa3cbd8138436a37af9ab466d79 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/f36a305d30f557306d87c787ddffe094ac5dac89 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/2e67c2037382abb56497bb9d7b7e10be04eb5598 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/b6bfe44b6dbb14a31d86c475cdc9c7689534fb09 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/057764172fcc6ee2ccb6c41351a55a9f054dc8fd |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/7404ce888a45eb7da0508b7cbbe6f2e95302eeb8 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/23f3770e1a53e6c7a553135011f547209e141e72 |  | cvelistv5 |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  In the Linux kernel, the following vulnerability has been resolved:bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}Cilium has a BPF egress gateway feature which forces outgoing K8s Podtraffic to pass through dedicated egress gateways which then SNAT thetraffic in order to interact with stable IPs outside the cluster.The traffic is directed to the gateway via vxlan tunnel in collect mdmode. A recent BPF change utilized the bpf_redirect_neigh() helper toforward packets after the arrival and decap on vxlan, which turned outover time that the kmalloc-256 slab usage in kernel was ever-increasing.The issue was that vxlan allocates the metadata_dst object and attachesit through a fake dst entry to the skb. The latter was never releasedthough given bpf_redirect_neigh() was merely setting the new dst entryvia skb_dst_set() without dropping an existing one first.The Linux kernel CVE team has assigned CVE-2025-40183 to this issue.
 openEuler评分：
  4.4
 Vector：CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-22.03-LTS-SP3(5.10.0):受影响
2.openEuler-22.03-LTS-SP4(5.10.0):受影响
3.openEuler-24.03-LTS(6.6.0):受影响
4.openEuler-24.03-LTS-SP1(6.6.0):受影响
5.openEuler-24.03-LTS-SP2(6.6.0):受影响
6.openEuler-24.03-LTS-SP3(6.6.0):受影响
7.master(6.12.33):不受影响
8.openEuler-20.03-LTS-SP4(4.19.90):不受影响
9.openEuler-24.03-LTS-Next(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.master(6.12.33):否
2.openEuler-20.03-LTS-SP4(4.19.90):否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.openEuler-22.03-LTS-SP4(5.10.0):否
5.openEuler-24.03-LTS(6.6.0):否
6.openEuler-24.03-LTS-Next(6.6.0):否
7.openEuler-24.03-LTS-SP1(6.6.0):否
8.openEuler-24.03-LTS-SP2(6.6.0):否
9.openEuler-24.03-LTS-SP3(6.6.0):否

原因说明：
  1.openEuler-22.03-LTS-SP3(5.10.0):正常修复
2.openEuler-22.03-LTS-SP4(5.10.0):正常修复
3.openEuler-24.03-LTS(6.6.0):正常修复
4.openEuler-24.03-LTS-SP1(6.6.0):正常修复
5.openEuler-24.03-LTS-SP2(6.6.0):正常修复
6.openEuler-24.03-LTS-SP3(6.6.0):正常修复
7.master(6.12.33):不受影响-漏洞代码不能被攻击者触发
8.openEuler-24.03-LTS-Next(6.6.0):不受影响-漏洞代码不能被攻击者触发
9.openEuler-20.03-LTS-SP4(4.19.90):不受影响-漏洞代码不存在

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2025-2769

src-openEuler/kernel

内容风险标识

评论 (5)

src-openEuler/kernel .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2025-40183

评论 (5)

搜索帮助

src-openEuler/kernel