Description

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdr_stream_decode_opaque_auth(), zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gss_krb5_verify_mic_v2(). This patch ensures that the value of checksum.len is not less than XDR_UNIT.

INFO

Published Date :

2025-11-12T10:23:21.327Z

Last Modified :

2025-12-01T06:18:34.691Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-40129 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-40129.

URL Resource
https://git.kernel.org/stable/c/6df164e29bd4e6505c5a2e0e5f1e1f6957a16a42 cve-icon cve-icon
https://git.kernel.org/stable/c/81cec07d303186d0d8c623ef8b5ecd3b81e94cf6 cve-icon cve-icon
https://git.kernel.org/stable/c/ab9a70cd2386a0d70c164b0905dd66bc9af52e77 cve-icon cve-icon
https://git.kernel.org/stable/c/affc03d44921f493deaae1d33151e3067a6f9f8f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025111254-CVE-2025-40129-fbb4@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-40129 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-40129 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact