Aller au contenu
en Se connecter
9.8 Critique

CVE-2025-40252 In the Linux kernel, the following vulnerability has been resolved: net: qlogic/qede: fix potential out-of-bounds read…

Description

In the Linux kernel, the following vulnerability has been resolved: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() The loops in 'qede_tpa_cont()' and 'qede_tpa_end()', iterate over 'cqe->len_list[]' using only a zero-length terminator as the stopping condition. If the terminator was missing or malformed, the loop could run past the end of the fixed-size array. Add an explicit bound check using ARRAY_SIZE() in both loops to prevent a potential out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Produits et versions touchés

Produit Versions touchées Corrigé en
Linux 6.18 premières → < 6.18 6.18
Linux 6.17 premières → < 6.17.10 6.17.10
Linux 6.12 premières → < 6.12.60 6.12.60
Linux 6.6 premières → < 6.6.118 6.6.118
Linux 6.1 premières → < 6.1.159 6.1.159
Linux 5.15 premières → < 5.15.197 5.15.197
Linux 4.6 Pas de correctif indiqué
RUGGEDCOM RST2428P 4.0 premières → < 4.0 4.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Linux

Les 18283 CVE de Linux →
CVE-2026-99270 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler() 8.1 Élevée CVE-2026-99269 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before… 7.8 Élevée CVE-2026-99261 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for… Non notée CVE-2026-99260 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags… Non notée
Suivre cette CVE