CVE-2025-71093: e1000: fix OOB in e1000_tbi_should_accept()
e1000: fix OOB in e1000tbishouldaccept()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In e1000_tbi_should_accept(), reject the frame before reading data[length - 1] when the reported length is zero or exceeds adapter->rx_buffer_len.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71093?
CVE-2025-71093 is classified as a medium-severity vulnerability in the Linux kernel.
How do I fix CVE-2025-71093?
To fix CVE-2025-71093, update to the latest stable version of the Linux kernel where the vulnerability has been patched.
What impact does CVE-2025-71093 have on my system?
CVE-2025-71093 could potentially allow an out-of-bounds read, which may lead to unauthorized access to kernel memory.
Which versions of the Linux kernel are affected by CVE-2025-71093?
CVE-2025-71093 affects specific versions of the Linux kernel that utilize the e1000 driver.
Is there a workaround for CVE-2025-71093 while I can't update?
While updating is the best course of action, there are no known workarounds for CVE-2025-71093.