cve 2025 40337

CVE-2025-40337 is a Linux kernel vulnerability in the stmmac Ethernet driver that affects Rx checksum offload. The flaw allowed packets with hardware-reported checksum failures to be incorrectly marked as valid and passed up the network stack. A targeted fix corrects this behavior, ensuring that packets with checksum errors are properly dropped. This issue is relevant to systems using the stmmac driver, commonly found in embedded and enterprise environments. The fix improves network reliability and security by preventing corrupted packets from being processed.