PT-2026-2608 · Linux+2 · Linux Kernel+2

Published

2026-01-13

·

Updated

2026-05-11

·

CVE-2025-71087

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc2-enjuk-tnguy-00378-g3005f5b77652-dirty
Description The Linux kernel contains off-by-one errors in the iavf config rss reg() function when configuring RSS hash key and lookup table. These errors can lead to out-of-bounds reads to memory and out-of-bounds writes to device registers. The issue stems from incorrect loop upper bounds introduced by a commit, which accesses memory beyond the allocated boundaries. A KASAN report indicates a slab-out-of-bounds read during the iavf config rss function call.
Recommendations Update to a version newer than 6.18.0-rc2-enjuk-tnguy-00378-g3005f5b77652-dirty.

Exploit

Fix

Weakness Enumeration

CWE-193

Related Identifiers

CVE-2025-71087
ECHO-F6FB-8140-2D33
MGASA-2026-0017
MGASA-2026-0018
OESA-2026-1275
OESA-2026-1303
OESA-2026-1304
OESA-2026-1305
OPENSUSE-SU-2026:20287-1
SUSE-SU-2026:0447-1
SUSE-SU-2026:0472-1
SUSE-SU-2026:0473-1
SUSE-SU-2026:0587-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20555-1
SUSE-SU-2026:20599-1
SUSE-SU-2026:20615-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8116-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8177-1
USN-8177-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8183-1
USN-8183-2
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8243-1
USN-8245-1
USN-8257-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu