CVE-2025-71291

🎯 CVE-2025-71291 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2025-71291 | In the Linux kernel, the following vulnerability has been resolved: misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() In the function bcm_vk_read(), the pointer entry is checked, indicating that it can be NULL. If entry is NULL and rc is set to -EMSGSIZE, the following code may cause null-pointer dereferences: struct vk_msg_blk tmp_msg = entry->to_h_msg[0]; set_msg_id(&tmp_msg, entry->usr_msg_id); tmp_msg.size = entry->to_h_blks -

In the Linux kernel, the following vulnerability has been resolved:

misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()

In the function bcm_vk_read(), the pointer entry is checked, indicating
that it can be NULL. If entry is NULL and rc is set to -EMSGSIZE, the
following code may cause null-pointer dereferences:

struct vk_msg_blk tmp_msg = entry->to_h_msg[0];
set_msg_id(&tmp_msg, entry->usr_msg_id);
tmp_msg.size = entry->to_h_blks - 1;

To prevent these possible null-pointer dereferences, copy to_h_msg,
usr_msg_id, and to_h_blks from iter into temporary variables, and return
these temporary variables to the application instead of accessing them
through a potentially NULL entry.

Klassifikation & Betroffenheit:

CWE-476 Linux Linux 88517757a829e9ce146a6c7233ad5dcdc66fcbb0 <ba75ecb97d3f4e95d59002c13afb6519205be6cbLinux patch: 6.1.165Linux patch: 0Linux patch: 6.6.128Linux 5.19Linux patch: 6.18.16Linux 88517757a829e9ce146a6c7233ad5dcdc66fcbb0 <741c5a3a0cd893a4218fc0fc8c18403e54fcfb22Linux 88517757a829e9ce146a6c7233ad5dcdc66fcbb0 <aa97ccc3dc1eba9f4537f0410e9dbb0b05ccf2fb

NULL Pointer Dereference 🎯 Medium

The product dereferences a pointer that it expects to be valid but is NULL.

🛡️ Empfohlene Mitigation: For any pointers that could have been modified or provided from a function that can return NULL, check the pointer for NULL before use. When working with a multithreaded or otherwise asynchronous environment, ensure that proper locking APIs are used to lock before the check, and unlock when it has finished [REF-1484].

Vollständige Definition bei MITRE ➔

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-99017 7.0 CVE-2026-98941 7.0 CVE-2026-98927 7.0 CVE-2026-98895 7.0 CVE-2026-98518 7.0

🩹 Patch verfügbar (OSV):

🩹 Kernel ≥ 6.1.165 🩹 Kernel ≥ 6.6.128 🩹 Kernel ≥ 6.12.75 🩹 Kernel ≥ 6.18.16 🩹 Kernel ≥ 6.19.6

🇩🇪 BSI-Sicherheitshinweise: BSI · mittel · Linux Kernel: Mehrere Schwachstellen ↗

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2025

Veröffentlicht 05/2026

Heute 05.11.

CVSS-Vektor-Analyse: 5.5

AV · Angriffsvektor Lokal

AC · Komplexität Gering

PR · Privilegien Gering

UI · Interaktion Keine

S · Scope Unverändert

C · Vertraulichkeit Keine

I · Integrität Keine

A · Verfügbarkeit Hoch

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Veröffentlicht:06.05.2026

Aktualisiert:14.10.2026 13:10

Assigner (CNA):Linux

EUVD-ID:EUVD-2025-209680

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-476 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

Tier	CVEs	Anteil
≥90 %	786	0,2 %
≥50 %	3.570	0,9 %
≥10 %	23.060	5,7 %
<10 %	380.695	93,3 %

Tier

CVEs

Anteil

≥90 %

786

0,2 %

≥50 %

3.570

0,9 %

≥10 %

23.060

5,7 %

<10 %

380.695

93,3 %

– OHNE BEWERTUNG

EPSS

0.1%

CVE-2025-71291 💻 Lokal 🔓 Keine Authentifizierung nötig

Linux

CVE-2025-71291 | In the Linux kernel, the following vulnerability has been resolved: misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() In the function bcm_vk_read(), the pointer entry is checked, indicating that it can be NULL. If entry is NULL and rc is set to -EMSGSIZE, the following code may cause null-pointer dereferences: struct vk_msg_blk tmp_msg = entry->to_h_msg[0]; set_msg_id(&tmp_msg, entry->usr_msg_id); tmp_msg.size = entry->to_h_blks -

CWE-476 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

vor 5 Monaten ↻ vor 5 Monaten

🛡️ Details ➔

Zero-Day & Vulnerability Intelligence Hub