CNNVD-202510-3885 Information

CNNVD ID

CNNVD-202510-3885

CVE-2025-40033

  • CNNVD Published: 2025-10-28

Description (Chinese)

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于在IS_ERR_OR_NULL检查前访问rproc->priv,可能导致空指针取消引用。

Description (English)

Linux Kernel is the kernel used by Linux, the Open Source Operator System of the Linux Foundation of the United States. Linux Kernel has a security loophole, which originates in a pre-IS ERR OR NULL visitrproc->priv, which may lead to the cancellation of the reference to an empty pointer.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Linux

Published

2025-10-28

Last Modified

2026-02-24

References

https://git.kernel.org/stable/c/f0164d89950120281f2446be9687cffa1e43dbcc https://git.kernel.org/stable/c/c9b6d789591f2bd57b0cbd59592493e11e029ed4 https://git.kernel.org/stable/c/d41e075b077142bb9ae5df40b9ddf9fd7821a811 https://git.kernel.org/stable/c/66821fdb723d55b25482a76b92d17d416efeae6b https://vigilance.fr/vulnerability/Linux-kernel-multiple-vulnerabilities-dated-28-10-2025-48601

Patch

https://www.kernel.org/

Share on: