CVE-2025-71291: misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()
In the Linux kernel, the following vulnerability has been resolved:
misc: bcmvk: Fix possible null-pointer dereferences in bcmvkread()
In the function bcmvkread(), the pointer entry is checked, indicating that it can be NULL. If entry is NULL and rc is set to -EMSGSIZE, the following code may cause null-pointer dereferences:
struct vkmsgblk tmpmsg = entry->tohmsg[0]; setmsgid(&tmpmsg, entry->usrmsgid); tmpmsg.size = entry->tohblks - 1;
To prevent these possible null-pointer dereferences, copy tohmsg, usrmsgid, and tohblks from iter into temporary variables, and return these temporary variables to the application instead of accessing them through a potentially NULL entry.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71291?
The severity of CVE-2025-71291 is classified as medium due to the potential for null-pointer dereferences.
How do I fix CVE-2025-71291?
To fix CVE-2025-71291, users should update their Linux kernel to the latest version where the vulnerability has been patched.
Which software is affected by CVE-2025-71291?
CVE-2025-71291 affects the Linux kernel specifically involving the bcm_vk driver.
What is the impact of CVE-2025-71291 on system security?
CVE-2025-71291 could allow for application crashes or unintentional system behavior due to null-pointer dereferences.
When was CVE-2025-71291 reported?
CVE-2025-71291 was identified and reported as a vulnerability in the Linux kernel.