PT-2026-2881 · Linux+2 · Linux Kernel+2
Published
2025-01-01
·
Updated
2026-05-11
·
CVE-2025-71120
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw within the SUNRPC component, specifically in the
svcauth gss function related to handling zero-length gss token values during the gss read proxy verf process. A zero-length token can lead to a NULL dereference when attempting to access memory associated with the token, potentially causing a system crash or other undefined behavior. The issue occurs because the code unconditionally attempts to evaluate page address(in token->pages[0]) even when the token is empty, leading to a potential NULL pointer dereference. The fix involves adding a guard to the initial memcpy operation to ensure it only executes when the length of the token is greater than zero.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu