CVE-2025-71112: net: hns3: add VLAN id validation before using
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: add VLAN id validation before using
Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The length of vlandelfailbmap is BITSTOLONGS(VLANNVID). It may cause out-of-bounds memory access once the VLAN id is bigger than or equal to VLANNVID.
Therefore, VLAN id needs to be checked to ensure it is within the range of VLANNVID.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
Validate the VLAN ID before using it when processing a VLAN configuration mailbox from a VF, ensuring it is within the range of VLAN_N_VID (less than VLAN_N_VID) to prevent out-of-bounds access to vlan_del_fail_bmap.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71112?
CVE-2025-71112 is classified as a medium severity vulnerability due to its potential impact on VLAN configuration integrity.
How do I fix CVE-2025-71112?
To fix CVE-2025-71112, ensure that you update your Linux kernel to the latest version that includes the VLAN ID validation improvements.
What conditions are required for CVE-2025-71112 to be exploited?
CVE-2025-71112 can be exploited when an attacker sends a malicious VLAN configuration mailbox to a vulnerable virtual function.
Which systems are affected by CVE-2025-71112?
CVE-2025-71112 affects systems running vulnerable versions of the Linux kernel that do not implement proper VLAN ID validation.
What is the impact of CVE-2025-71112 on network security?
The impact of CVE-2025-71112 on network security includes the potential for unauthorized access and manipulation of VLAN configurations.