exploitDog

CVE-2025-39853

Опубликовано: 19 сент. 2025

Источник: nvd

CVSS3: 7.1

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix potential invalid access when MAC list is empty

list_first_entry() never returns NULL - if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenced.

Fix this by using list_first_entry_or_null instead of list_first_entry.

Ссылки

https://git.kernel.org/stable/c/1eadabcf5623f1237a539b16586b4ed8ac8dffcd
Patch
https://git.kernel.org/stable/c/3c6fb929afa313d9d11f780451d113f73922fe5d
Patch
https://git.kernel.org/stable/c/66e7cdbda74ee823ec2bf7b830ebd235c54f5ddf
Patch
https://git.kernel.org/stable/c/971feafe157afac443027acdc235badc6838560b
Patch
https://git.kernel.org/stable/c/9c21fc4cebd44dd21016c61261a683af390343f8
Patch
https://git.kernel.org/stable/c/a556f06338e1d5a85af0e32ecb46e365547f92b9
Patch
https://git.kernel.org/stable/c/e2a5e74879f9b494bbd66fa93f355feacde450c7
Patch
https://git.kernel.org/stable/c/fb216d980fae6561c7c70af8ef826faf059c6515
Patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
Third Party Advisory
Mailing List
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
Third Party Advisory
Mailing List

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.6 (включая) до 5.4.299 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.243 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.192 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.151 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.105 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.46 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.16.6 (исключая)

cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 5%

0.00022

Низкий

7.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2025-39853

CVSS3: 7.1

ubuntu

5 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns NULL - if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenced. Fix this by using list_first_entry_or_null instead of list_first_entry.

CVE-2025-39853

CVSS3: 7

redhat

5 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns NULL - if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenced. Fix this by using list_first_entry_or_null instead of list_first_entry.

CVE-2025-39853

CVSS3: 7

msrc

18 дней назад

i40e: Fix potential invalid access when MAC list is empty

CVE-2025-39853

CVSS3: 7.1

debian

5 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: i ...

GHSA-7fp7-xjmp-444h

CVSS3: 7.1

github

5 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns NULL - if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenced. Fix this by using list_first_entry_or_null instead of list_first_entry.

EPSS

Процентиль: 5%

0.00022

Низкий

7.1 High

CVSS3

Дефекты

CWE-125