Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-71120

SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf A zero length gss_token results in pages == 0 and in_token->pages[0] is NULL. The code unconditionally evaluates page_address(in_token->pages[0]) for the initial memcpy, which can dereference NULL even when the copy length is 0. Guard the first memcpy so it only runs when length > 0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5866efa8cbfbadf3905072798e96652faf02dbe8 to < a8f1e445ce3545c90d69c9e8ff8f7821825fe810affected
  • 5866efa8cbfbadf3905072798e96652faf02dbe8 to < 4dedb6a11243a5c9eb9dbb97bca3c98bd725e83daffected
  • 5866efa8cbfbadf3905072798e96652faf02dbe8 to < f9e53f69ac3bc4ef568b08d3542edac02e83fefdaffected
  • 5866efa8cbfbadf3905072798e96652faf02dbe8 to < 7452d53f293379e2c38cfa8ad0694aa46fc4788baffected
  • 5866efa8cbfbadf3905072798e96652faf02dbe8 to < a2c6f25ab98b423f99ccd94874d655b8bcb01a19affected
  • 5866efa8cbfbadf3905072798e96652faf02dbe8 to < 1c8bb965e9b0559ff0f5690615a527c30f651dd8affected
  • 5866efa8cbfbadf3905072798e96652faf02dbe8 to < d4b69a6186b215d2dc1ebcab965ed88e8d41768daffected
  • 66ed7b413d31c6ff23901ac4443b1cc1af2f6113affected
  • 7be8c165dc81564705e8e0b72d398ef708f67eaaaffected
  • 4.19.99 to < 4.20affected
  • 5.4.15 to < 5.5affected

Linux Linux

Default version status: affected

  • 5.5affected
  • 0 to < 5.5unaffected
  • 5.10.248 to ≤ 5.10.*unaffected
  • 5.15.198 to ≤ 5.15.*unaffected
  • 6.1.160 to ≤ 6.1.*unaffected
  • 6.6.120 to ≤ 6.6.*unaffected
  • 6.12.64 to ≤ 6.12.*unaffected
  • 6.18.3 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References