GHSA-mp9c-x94p-8jh7

GHSA-mp9c-x94p-8jh7 PUBLISHED

Record from GitHub Advisory Database · Published October 28, 2025

In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 ("nbd: verify socket is supported during setup") made sure the socket supported a shutdown() method. Explicitely accept TCP and UNIX stream sockets.

Timeline

Oct 28, 2025 CVE Published
May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-mp9c-x94p-8jh7
vulnetix vdb fixes GHSA-mp9c-x94p-8jh7

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-mp9c-x94p-8jh7/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2025-40080 advisory
https://git.kernel.org/stable/c/37ad11f20e164c23ce827dd455b42c0fdd29685c url
https://git.kernel.org/stable/c/4f9e6ff6319dbcebea64b50af0304cf0ad7e97e7 url
https://git.kernel.org/stable/c/808e2335bc1cf2293b9e36ccc94c267c81509c71 url
https://git.kernel.org/stable/c/9f7c02e031570e8291a63162c6c046dc15ff85b0 url
https://cert-portal.siemens.com/productcert/html/ssa-019113.html url
https://git.kernel.org/stable/c/c365e8f20f4201d873a70385bd919f0fb531e960 url

Look up in the Resolve Platform →