CVE-2025-40129

CVE-2025-40129

High · published November 12, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

sunrpc: fix null pointer dereference on zero-length checksum

In xdr_stream_decode_opaque_auth(), zero-length checksum.len causes

checksum.data to be set to NULL. This triggers a NPD when accessing

checksum.data in gss_krb5_verify_mic_v2(). This patch ensures that

the value of checksum.len is not less than XDR_UNIT.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00566 · 46.2th percentile
Published
2025-11-12T16:15Z
References (4)
https://git.kernel.org/stable/c/6df164e29bd4e6505c5a2e0e5f1e1f6957a16a42 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/81cec07d303186d0d8c623ef8b5ecd3b81e94cf6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ab9a70cd2386a0d70c164b0905dd66bc9af52e77 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/affc03d44921f493deaae1d33151e3067a6f9f8f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 12 NOV 10:23Z
    sunrpc: fix null pointer dereference on zero-length checksum
    cvelistv5