PT-2026-2889 · Linux+2 · Linux Kernel+2
Published
2025-01-01
·
Updated
2026-04-06
·
CVE-2025-71128
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to the handling of ERSPAN traffic in GRE tunnels. Specifically, the
options len field within the ip tunnel info structure is not properly initialized before being referenced, leading to a potential buffer overflow when compiled with GCC 15+ and FORTIFY SOURCE enabled. This can result in a kernel panic, as demonstrated by the error message 'memcpy: detected buffer overflow: 4 byte write of buffer size 0'. The issue arises from a partial update in the GRE ERSPAN code that bypasses the initialization helper function, ip tunnel info opts set().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu