Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-40053

net: dlink: handle copy_thresh allocation failure

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.246, 5.15.195, 6.1.156, 6.6.112, 6.12.53, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: net: dlink: handle copy_thresh allocation failure The driver did not handle failure of `netdev_alloc_skb_ip_align()`. If the allocation failed, dereferencing `skb->protocol` could lead to a NULL pointer dereference. This patch tries to allocate `skb`. If the allocation fails, it falls back to the normal path. Tested-on: D-Link DGE-550T Rev-A3

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 84fd710a704f3d53d4120e452e86cea558cf73a8; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 5aa9b885602811a026a3f45c92ea2b4b04c54f09; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 9d49e4b14609e1a20d931e718962c4b6b5485174; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in ea87151df398d407a632c7bf63013290f01c5009; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 7ed5010fef0930f4322d620052edc854ef3ec41f; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in fd7b6b2c920d7fd370a612be416a904d6e1ebe55; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 8169a6011c5fecc6cb1c3654c541c567d3318de8

  • Linux Linux

    2.6.12

  • KernelLinux

    From 2.6.12 · fixed in 5.10.246; From 5.11.0 · fixed in 5.15.195; From 5.16.0 · fixed in 6.1.156; From 6.2.0 · fixed in 6.6.112; From 6.7.0 · fixed in 6.12.53; From 6.13.0 · fixed in 6.17.3

References 7

git.kernel.org