Log in Start free

Vulnerability · Published Jan 14, 2026 · Assigned by Linux

CVE-2025-71120SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf

High 7.5

In plain English

A high-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 55.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf A zero length gss_token results in pages == 0 and in_token->pages[0] is NULL. The code unconditionally evaluates page_address(in_token->pages[0]) for the initial memcpy, which can dereference NULL even when the copy length is 0. Guard the first memcpy so it only runs when length > 0.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.162-1DEBIAN-CVE-2025-71120
Debian:13linux6.12.69-1DEBIAN-CVE-2025-71120
Debian:14linux6.18.3-1DEBIAN-CVE-2025-71120
Ubuntu:22.04:LTSlinux5.15.0-173.183UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux6.8.0-110.110UBUNTU-CVE-2025-71120
Ubuntu:25.10linux6.17.0-22.22UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-aws5.15.0-1103.110UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-aws6.8.0-1052.55UBUNTU-CVE-2025-71120
Ubuntu:25.10linux-aws6.17.0-1012.12UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1012.12~24.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1052.55~22.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-azure5.15.0-1109.118UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-azure6.8.0-1054.60UBUNTU-CVE-2025-71120
Ubuntu:25.10linux-azure6.17.0-1013.13UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1013.13~24.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1059.65~22.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1109.118.1UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2025-71120
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-gcp5.15.0-1103.112UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-gcp6.8.0-1054.57UBUNTU-CVE-2025-71120
Ubuntu:25.10linux-gcp6.17.0-1012.12UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1012.12~24.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1054.57~22.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-gke5.15.0-1099.105UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-gke6.8.0-1050.56UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1086.94UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1037.40UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-22.22~24.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-110.110~22.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-ibm5.15.0-1097.100UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-ibm6.8.0-1051.51UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1051.51~22.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1098.104UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-kvm5.15.0-1095.100UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-173.183UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-110.110.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-110.110.1~22.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1098.99UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1051.54UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1018.18UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1051.54~22.04.1UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1051.54.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1055.55UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1022.22UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1044.44UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1020.20UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-oracle5.15.0-1100.106UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-oracle6.8.0-1049.50UBUNTU-CVE-2025-71120
Ubuntu:25.10linux-oracle6.17.0-1011.11UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1011.11~24.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1049.50~22.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-raspi5.15.0-1097.100UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-raspi6.8.0-1052.56UBUNTU-CVE-2025-71120
Ubuntu:25.10linux-raspi6.17.0-1013.13UBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71120
Ubuntu:25.10linux-realtime6.17.0-1010.11UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71120
Ubuntu:25.10linux-riscv6.17.0-22.22.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-riscv-6.176.17.0-22.22.1~24.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-110.110~22.04.1UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-71120
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1028.29UBUNTU-CVE-2025-71120
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1067.71UBUNTU-CVE-2025-71120

Affected products (as reported)

VendorProductVersions
Linux Linux 5866efa8cbfbadf3905072798e96652faf02dbe8 – before a8f1e445ce3545c90d69c9e8ff8f7821825fe8105866efa8cbfbadf3905072798e96652faf02dbe8 – before 4dedb6a11243a5c9eb9dbb97bca3c98bd725e83d5866efa8cbfbadf3905072798e96652faf02dbe8 – before f9e53f69ac3bc4ef568b08d3542edac02e83fefd5866efa8cbfbadf3905072798e96652faf02dbe8 – before 7452d53f293379e2c38cfa8ad0694aa46fc4788b5866efa8cbfbadf3905072798e96652faf02dbe8 – before a2c6f25ab98b423f99ccd94874d655b8bcb01a195866efa8cbfbadf3905072798e96652faf02dbe8 – before 1c8bb965e9b0559ff0f5690615a527c30f651dd85866efa8cbfbadf3905072798e96652faf02dbe8 – before d4b69a6186b215d2dc1ebcab965ed88e8d41768d66ed7b413d31c6ff23901ac4443b1cc1af2f6113
Linux Linux 5.5

Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References