CVE Explorer

CVE-2025-71096

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly The netlink response for RDMA_NL_LS_OP_IP_RESOLVE should always have a LS_NLA_TYPE_DGID attribute, it is invalid if it does not. Use the nl parsing logic properly and call nla_parse_deprecated() to fill the nlattrs array and then directly index that array to get the data for the DGID. Just fail if it is NULL. Remove the for loop searching for the nla, and squash

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:998472a27ab341f89970728c23adaa873ccdb9ab06060f4a8454d46b71820c33

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/infiniband/core/addr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"376f46c8983458ead26cac83aa897a0b78491831","status":"affected","version":"ae43f8286730d1f2d241c34601df59f6d2286ac4","versionType":"git"},{"lessThan":"bfe10318fc23e0b3f1d0a18dad387d29473a624d","status":"affected","version":"ae43f8286730d1f2d241c34601df59f6d2286ac4","versionType":"git"},{"lessThan":"45532638de5da24c201aa2a9b3dd4b054064de7b","status":"affected","version":"ae43f8286730d1f…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:042710c404329b10b3b4703d3985c9026bacd0d05e9d7550ff65ca294de32482 · sha256:d1b8abaa2e52bf22… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/infiniband/core/addr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.7"},{"lessThan":"4.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:042710c404329b10b3b4703d3985c9026bacd0d05e9d7550ff65ca294de32482 · sha256:d1b8abaa2e52bf22… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:042710c404329b10b3b4703d3985c9026bacd0d05e9d7550ff65ca294de32482 · sha256:d1b8abaa2e52bf22… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:042710c404329b10b3b4703d3985c9026bacd0d05e9d7550ff65ca294de32482 · sha256:d1b8abaa2e52bf22… · /containers/cna/affected/1

Source references

7 source assertions

{"url":"https://git.kernel.org/stable/c/0b948afc1ded88b3562c893114387f34389eeb94"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:042710c404329b10b3b4703d3985c9026bacd0d05e9d7550ff65ca294de32482 · sha256:d1b8abaa2e52bf22… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/376f46c8983458ead26cac83aa897a0b78491831"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:042710c404329b10b3b4703d3985c9026bacd0d05e9d7550ff65ca294de32482 · sha256:d1b8abaa2e52bf22… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/45532638de5da24c201aa2a9b3dd4b054064de7b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:042710c404329b10b3b4703d3985c9026bacd0d05e9d7550ff65ca294de32482 · sha256:d1b8abaa2e52bf22… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/9d85524789c2f17c0e87de8d596bcccc3683a1fc"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:042710c404329b10b3b4703d3985c9026bacd0d05e9d7550ff65ca294de32482 · sha256:d1b8abaa2e52bf22… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/a7b8e876e0ef0232b8076972c57ce9a7286b47ca"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:042710c404329b10b3b4703d3985c9026bacd0d05e9d7550ff65ca294de32482 · sha256:d1b8abaa2e52bf22… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/acadd4097d25d6bd472bcb3f9f3eba2b5105d1ec"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:042710c404329b10b3b4703d3985c9026bacd0d05e9d7550ff65ca294de32482 · sha256:d1b8abaa2e52bf22… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/bfe10318fc23e0b3f1d0a18dad387d29473a624d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:042710c404329b10b3b4703d3985c9026bacd0d05e9d7550ff65ca294de32482 · sha256:d1b8abaa2e52bf22… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer