-

CVE-2025-39853

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix potential invalid access when MAC list is empty

list_first_entry() never returns NULL - if the list is empty, it still
returns a pointer to an invalid object, leading to potential invalid
memory access when dereferenced.

Fix this by using list_first_entry_or_null instead of list_first_entry.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < 971feafe157afac443027acdc235badc6838560b
Version e3219ce6a775468368fb270fae3eb82a6787b436
Status affected
Version < 3c6fb929afa313d9d11f780451d113f73922fe5d
Version e3219ce6a775468368fb270fae3eb82a6787b436
Status affected
Version < 1eadabcf5623f1237a539b16586b4ed8ac8dffcd
Version e3219ce6a775468368fb270fae3eb82a6787b436
Status affected
Version < e2a5e74879f9b494bbd66fa93f355feacde450c7
Version e3219ce6a775468368fb270fae3eb82a6787b436
Status affected
Version < fb216d980fae6561c7c70af8ef826faf059c6515
Version e3219ce6a775468368fb270fae3eb82a6787b436
Status affected
Version < 66e7cdbda74ee823ec2bf7b830ebd235c54f5ddf
Version e3219ce6a775468368fb270fae3eb82a6787b436
Status affected
Version < 9c21fc4cebd44dd21016c61261a683af390343f8
Version e3219ce6a775468368fb270fae3eb82a6787b436
Status affected
Version < a556f06338e1d5a85af0e32ecb46e365547f92b9
Version e3219ce6a775468368fb270fae3eb82a6787b436
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.6
Status affected
Version < 4.6
Version 0
Status unaffected
Version <= 5.4.*
Version 5.4.299
Status unaffected
Version <= 5.10.*
Version 5.10.243
Status unaffected
Version <= 5.15.*
Version 5.15.192
Status unaffected
Version <= 6.1.*
Version 6.1.151
Status unaffected
Version <= 6.6.*
Version 6.6.105
Status unaffected
Version <= 6.12.*
Version 6.12.46
Status unaffected
Version <= 6.16.*
Version 6.16.6
Status unaffected
Version <= *
Version 6.17-rc5
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.079
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String