CVE-2025-40252
Description
In the Linux kernel, the following vulnerability has been resolved: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() The loops in 'qede_tpa_cont()' and 'qede_tpa_end()', iterate over 'cqe->len_list[]' using only a zero-length terminator as the stopping condition. If the terminator was missing or malformed, the loop could run past the end of the fixed-size array. Add an explicit bound check using ARRAY_SIZE() in both loops to prevent a potential out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with SVACE.
How to fix
- Linux Linuxecbb12caf399d7cf364b7553ed5aebeaa2f255bc, a778912b4a53587ea07d85526d152f85d109cbfe, f0923011c1261b33a2ac1de349256d39cb750dd0, 917a9d02182ac8b4f25eb47dc02f3ec679608c24, e441db07f208184e0466abf44b389a81d70c340e, 896f1a2493b59beb2b5ccdf990503dbb16cb2256 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 55482edc25f0606851de42e73618f813f310d009 ≤ v < ecbb12caf399d7cf364b7553ed5aebeaa2f255bc, 55482edc25f0606851de42e73618f813f310d009 ≤ v < a778912b4a53587ea07d85526d152f85d109cbfe, 55482edc25f0606851de42e73618f813f310d009 ≤ v < f0923011c1261b33a2ac1de349256d39cb750dd0, 55482edc25f0606851de42e73618f813f310d009 ≤ v < 917a9d02182ac8b4f25eb47dc02f3ec679608c24, 55482edc25f0606851de42e73618f813f310d009 ≤ v < e441db07f208184e0466abf44b389a81d70c340e, 55482edc25f0606851de42e73618f813f310d009 ≤ v < 896f1a2493b59beb2b5ccdf990503dbb16cb2256, 4.6 | ecbb12caf399d7cf364b7553ed5aebeaa2f255bc, a778912b4a53587ea07d85526d152f85d109cbfe, f0923011c1261b33a2ac1de349256d39cb750dd0, 917a9d02182ac8b4f25eb47dc02f3ec679608c24, e441db07f208184e0466abf44b389a81d70c340e, 896f1a2493b59beb2b5ccdf990503dbb16cb2256 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.