Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-39867

Опубликовано: 24 сент. 2025
Источник: msrc
CVSS3: 4.7

Описание

netfilter: nft_set_pipapo: fix null deref for empty set

4.7 Medium

CVSS3

Связанные уязвимости

ubuntu
около 2 месяцев назад

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS3: 5.5
redhat
около 2 месяцев назад

No description is available for this CVE.

nvd
около 2 месяцев назад

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

github
около 2 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: fix null deref for empty set Blamed commit broke the check for a null scratch map: - if (unlikely(!m || !*raw_cpu_ptr(m->scratch))) + if (unlikely(!raw_cpu_ptr(m->scratch))) This should have been "if (!*raw_ ...)". Use the pattern of the avx2 version which is more readable. This can only be reproduced if avx2 support isn't available.

CVSS3: 5.5
fstec
3 месяца назад

Уязвимость функции nft_set_pipapo() модуля net/netfilter/nft_set_pipapo.c ядра оперционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

4.7 Medium

CVSS3