Skip to content
fr Sign in
9.8 Critical

CVE-2025-40252 In the Linux kernel, the following vulnerability has been resolved: net: qlogic/qede: fix potential out-of-bounds read…

Description

In the Linux kernel, the following vulnerability has been resolved: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() The loops in 'qede_tpa_cont()' and 'qede_tpa_end()', iterate over 'cqe->len_list[]' using only a zero-length terminator as the stopping condition. If the terminator was missing or malformed, the loop could run past the end of the fixed-size array. Add an explicit bound check using ARRAY_SIZE() in both loops to prevent a potential out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products and versions

Product Affected versions Fixed in
Linux 6.18 earliest → < 6.18 6.18
Linux 6.17 earliest → < 6.17.10 6.17.10
Linux 6.12 earliest → < 6.12.60 6.12.60
Linux 6.6 earliest → < 6.6.118 6.6.118
Linux 6.1 earliest → < 6.1.159 6.1.159
Linux 5.15 earliest → < 5.15.197 5.15.197
Linux 4.6 No fix stated
RUGGEDCOM RST2428P 4.0 earliest → < 4.0 4.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Linux

The 18283 CVEs of Linux →
CVE-2026-99270 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler() 8.1 High CVE-2026-99269 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before… 7.8 High CVE-2026-99261 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for… Not rated CVE-2026-99260 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags… Not rated
Track this CVE