CVE-2025-71231: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode The local variable 'i' is initialized with -EINVAL, but the for loop immediately overwrites it and -EINVAL is never returned. If no empty compression mode can be found, the function would return the out-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid array access in add_iaa_compression_mode(). Fix both issues by returning either a valid index or -EINVAL.

Засегнати продукти

• Linux Linux: b190447e0fa3ef7355480d641d078962e03768b4 преди c77b33b58512708bd5603f48465f018c8b748847; b190447e0fa3ef7355480d641d078962e03768b4 преди d75207465eed20bc9b0daa4a0927de9568996067; b190447e0fa3ef7355480d641d078962e03768b4 преди de16f5bca05cace238d237791ed1b6e9d22dab60; b190447e0fa3ef7355480d641d078962e03768b4 преди 48329301969f6d21b2ef35f678e40f72b59eac94
• Linux Linux: 6.8; преди 6.8; 6.12.72 до 6.12.*; 6.18.11 до 6.18.*; 6.19.1 до 6.19.*; 7.0 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-71231
• https://nvd.nist.gov/vuln/detail/CVE-2025-71231
• https://git.kernel.org/stable/c/c77b33b58512708bd5603f48465f018c8b748847
• https://git.kernel.org/stable/c/d75207465eed20bc9b0daa4a0927de9568996067
• https://git.kernel.org/stable/c/de16f5bca05cace238d237791ed1b6e9d22dab60
• https://git.kernel.org/stable/c/48329301969f6d21b2ef35f678e40f72b59eac94