CVE-2025-40129
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
12/11/2025
Última modificación:
12/11/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
sunrpc: fix null pointer dereference on zero-length checksum<br />
<br />
In xdr_stream_decode_opaque_auth(), zero-length checksum.len causes<br />
checksum.data to be set to NULL. This triggers a NPD when accessing<br />
checksum.data in gss_krb5_verify_mic_v2(). This patch ensures that<br />
the value of checksum.len is not less than XDR_UNIT.