CVE-2025-40129
High
Description
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdr_stream_decode_opaque_auth(), zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gss_krb5_verify_mic_v2(). This patch ensures that the value of checksum.len is not less than XDR_UNIT.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linux81cec07d303186d0d8c623ef8b5ecd3b81e94cf6, affc03d44921f493deaae1d33151e3067a6f9f8f, ab9a70cd2386a0d70c164b0905dd66bc9af52e77, 6df164e29bd4e6505c5a2e0e5f1e1f6957a16a42 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 0653028e8f1c97fec30710813a001ad8a2ec34f4 ≤ v < 81cec07d303186d0d8c623ef8b5ecd3b81e94cf6, 0653028e8f1c97fec30710813a001ad8a2ec34f4 ≤ v < affc03d44921f493deaae1d33151e3067a6f9f8f, 0653028e8f1c97fec30710813a001ad8a2ec34f4 ≤ v < ab9a70cd2386a0d70c164b0905dd66bc9af52e77, 0653028e8f1c97fec30710813a001ad8a2ec34f4 ≤ v < 6df164e29bd4e6505c5a2e0e5f1e1f6957a16a42, 6.3 | 81cec07d303186d0d8c623ef8b5ecd3b81e94cf6, affc03d44921f493deaae1d33151e3067a6f9f8f, ab9a70cd2386a0d70c164b0905dd66bc9af52e77, 6df164e29bd4e6505c5a2e0e5f1e1f6957a16a42 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.