https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 20:56:17 +0000 https://vulnerability.circl.lu/vuln/cve-2025-71120 <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf</p> <p>A zero length gss_token results in pages == 0 and in_token-&gt;pages[0] is NULL. The code unconditionally evaluates page_address(in_token-&gt;pages[0]) for the initial memcpy, which can dereference NULL even when the copy length is 0. Guard the first memcpy so it only runs when length &gt; 0.</p> <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf</p> <p>A zero length gss_token results in pages == 0 and in_token-&gt;pages[0] is NULL. The code unconditionally evaluates page_address(in_token-&gt;pages[0]) for the initial memcpy, which can dereference NULL even when the copy length is 0. Guard the first memcpy so it only runs when length &gt; 0.</p> https://vulnerability.circl.lu/vuln/cve-2025-71120