-

CVE-2025-40129

sunrpc: fix null pointer dereference on zero-length checksum

In the Linux kernel, the following vulnerability has been resolved:

sunrpc: fix null pointer dereference on zero-length checksum

In xdr_stream_decode_opaque_auth(), zero-length checksum.len causes
checksum.data to be set to NULL. This triggers a NPD when accessing
checksum.data in gss_krb5_verify_mic_v2(). This patch ensures that
the value of checksum.len is not less than XDR_UNIT.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 0653028e8f1c97fec30710813a001ad8a2ec34f4
Version < 81cec07d303186d0d8c623ef8b5ecd3b81e94cf6
Status affected
Version 0653028e8f1c97fec30710813a001ad8a2ec34f4
Version < affc03d44921f493deaae1d33151e3067a6f9f8f
Status affected
Version 0653028e8f1c97fec30710813a001ad8a2ec34f4
Version < ab9a70cd2386a0d70c164b0905dd66bc9af52e77
Status affected
Version 0653028e8f1c97fec30710813a001ad8a2ec34f4
Version < 6df164e29bd4e6505c5a2e0e5f1e1f6957a16a42
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.3
Status affected
Version 0
Version < 6.3
Status unaffected
Version <= 6.6.*
Version 6.6.112
Status unaffected
Version <= 6.12.*
Version 6.12.53
Status unaffected
Version <= 6.17.*
Version 6.17.3
Status unaffected
Version <= *
Version 6.18
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.081
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.