CVE-2025-40080 – nbd: restrict sockets to TCP and UDP

CVE ID : CVE-2025-40080

Published : Oct. 28, 2025, 12:15 p.m. | 29 minutes ago

Description : In the Linux kernel, the following vulnerability has been resolved:

nbd: restrict sockets to TCP and UDP

Recently, syzbot started to abuse NBD with all kinds of sockets.

Commit cf1b2326b734 (“nbd: verify socket is supported during setup”)
made sure the socket supported a shutdown() method.

Explicitely accept TCP and UNIX stream sockets.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…