CVE-2025-71137

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-01-14 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that the RX ring size (rx_pending) is not set below the permitted length. This avoids UBSAN shift-out-of-bounds errors when users passes small or zero ring sizes via ethtool -G.

Weakness Classification (1)

Affected Software (18)

VendorProductVersion
Linux Linux d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < 5d8dfa3abb9a845302e021cf9c92d941abbc011a
Linux Linux d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < 4cc4cfe4d23c883120b6f3d41145edbaa281f2ab
Linux Linux d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < 658caf3b8aad65f8b8e102670ca4f68c7030f655
Linux Linux d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < b23a2e15589466a027c9baa3fb5813c9f6a6c6dc
Linux Linux d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < aa743b0d98448282b2cb37356db8db2a48524624
Linux Linux d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < 442848e457f5a9f71a4e7e14d24d73dae278ebe3
Linux Linux d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < 85f4b0c650d9f9db10bda8d3acfa1af83bf78cf7
Linux Linux 5.6
linux linux_kernel 5.6.1 – 5.10.248
linux linux_kernel 5.6
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.19%
Raw Score 0.001880
Percentile 8.5%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00188
2026-11-05
0.00188

Intelligence Sources

mitre ref →
nvd ref →