NetSight
IP …
high7.1

CVE-2025-39853

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns …

Impact

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns NULL - if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenced. Fix this by using list_first_entry_or_null instead of list_first_entry.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.6 before 5.4.299
from 5.5 before 5.10.243
from 5.11 before 5.15.192
from 5.16 before 6.1.151
from 6.2 before 6.6.105
from 6.7 before 6.12.46
DebianDebian Linux
Version 11.0

Weakness classification

CWE-125

References