CVE-2025-71112: net: hns3: add VLAN id validation before using
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: add VLAN id validation before using
Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The length of vlandelfailbmap is BITSTOLONGS(VLANNVID). It may cause out-of-bounds memory access once the VLAN id is bigger than or equal to VLANNVID.
Therefore, VLAN id needs to be checked to ensure it is within the range of VLANNVID.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Ensure VLAN IDs are validated to be within the allowed range (checked to be less than or equal to VLAN_N_VID) before using VLAN configuration data (net: hns3: add VLAN id validation before using receive a VLAN configuration mailbox from VF).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71112?
CVE-2025-71112 is classified as a medium severity vulnerability due to its potential impact on VLAN configuration integrity.
How do I fix CVE-2025-71112?
To fix CVE-2025-71112, ensure that you update your Linux kernel to the latest version that includes the VLAN ID validation improvements.
What conditions are required for CVE-2025-71112 to be exploited?
CVE-2025-71112 can be exploited when an attacker sends a malicious VLAN configuration mailbox to a vulnerable virtual function.
Which systems are affected by CVE-2025-71112?
CVE-2025-71112 affects systems running vulnerable versions of the Linux kernel that do not implement proper VLAN ID validation.
What is the impact of CVE-2025-71112 on network security?
The impact of CVE-2025-71112 on network security includes the potential for unauthorized access and manipulation of VLAN configurations.