CVE-2025-40080
Published Oct 28, 2025
Modified Apr 15, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 ("nbd: verify socket is supported during setup") made sure the socket supported a shutdown() method. Explicitely accept TCP and UNIX stream sockets.
Is your site exposed to CVE-2025-40080?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/37ad11f20e164c23ce827dd455b42c0fdd29685c
https://git.kernel.org/stable/c/4f9e6ff6319dbcebea64b50af0304cf0ad7e97e7
https://git.kernel.org/stable/c/808e2335bc1cf2293b9e36ccc94c267c81509c71
https://git.kernel.org/stable/c/9f7c02e031570e8291a63162c6c046dc15ff85b0
https://git.kernel.org/stable/c/c365e8f20f4201d873a70385bd919f0fb531e960
Frequently Asked Questions
What is CVE-2025-40080? +
In the Linux kernel, the following vulnerability has been resolved:
nbd: restrict sockets to TCP and UDP
Recently, syzbot started to abuse NBD with all kinds of sockets.
Commit cf1b2326b734 ("nbd: verify socket is supported during setup")
made sure the socket supported a shutdown() method.
Explicitely accept TCP and UNIX stream sockets.
How do I check if I'm vulnerable to CVE-2025-40080? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.