CVE-2025-71064: net: hns3: using the num_tqps in the vf driver to apply for resources
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: using the numtqps in the vf driver to apply for resources
Currently, hdev->htqp is allocated using hdev->numtqps, and kinfo->tqp is allocated using kinfo->numtqps. However, kinfo->numtqps is set to min(newtqps, hdev->numtqps); Therefore, kinfo->numtqps may be smaller than hdev->numtqps, which causes some hdev->htqp[i] to remain uninitialized in hclgevfknicsetup().
Thus, this patch allocates hdev->htqp and kinfo->tqp using hdev->numtqps, ensuring that the lengths of hdev->htqp and kinfo->tqp are consistent and that all elements are properly initialized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71064?
CVE-2025-71064 has been classified with a high severity due to resource allocation issues in the Linux kernel.
How do I fix CVE-2025-71064?
To fix CVE-2025-71064, update your Linux kernel to the latest version that includes the security patch.
What impact does CVE-2025-71064 have on affected systems?
CVE-2025-71064 can lead to improper resource allocation which may compromise system stability and performance.
Which versions of the Linux kernel are affected by CVE-2025-71064?
CVE-2025-71064 affects specific versions of the Linux kernel that utilize the hns3 driver.
Is there a workaround for CVE-2025-71064 while a patch is unavailable?
Currently, there are no recommended workarounds for CVE-2025-71064, and users should apply the patch as soon as it is available.