CVE Explorer

CVE-2025-71133

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: avoid invalid read in irdma_net_event irdma_net_event() should not dereference anything from "neigh" (alias "ptr") until it has checked that the event is NETEVENT_NEIGH_UPDATE. Other events come with different structures pointed to by "ptr" and they may be smaller than struct neighbour. Move the read of neigh->dev under the NETEVENT_NEIGH_UPDATE case. The bug is mostly harmless, but it triggers KASAN on debug ker

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:e710a447ccac816e7501c117c01998c7e33eb7648b90fe312d966eb09c7d1e25

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/infiniband/hw/irdma/utils.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.14"},{"lessThan":"5.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.120","versionType":"semver…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:dff89ecf556a72643cae9ba63b00813fc83b9a124947dc25c0255d7474208007 · sha256:2ba42769d7b2898a… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/infiniband/hw/irdma/utils.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"db93ae6fa66f1c61ae63400191195e3ee58021da","status":"affected","version":"915cc7ac0f8e2a23675ee896e87f17c7d3c47089","versionType":"git"},{"lessThan":"305c02e541befe4a44ffde30ed374970f41aeb6c","status":"affected","version":"915cc7ac0f8e2a23675ee896e87f17c7d3c47089","versionType":"git"},{"lessThan":"fc23d05f0b3fb4d80657e7afebae2cae686b31c8","status":"affected","version":"915cc7ac0f…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:dff89ecf556a72643cae9ba63b00813fc83b9a124947dc25c0255d7474208007 · sha256:2ba42769d7b2898a… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:dff89ecf556a72643cae9ba63b00813fc83b9a124947dc25c0255d7474208007 · sha256:2ba42769d7b2898a… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:dff89ecf556a72643cae9ba63b00813fc83b9a124947dc25c0255d7474208007 · sha256:2ba42769d7b2898a… · /containers/cna/affected/0

Source references

6 source assertions

{"url":"https://git.kernel.org/stable/c/305c02e541befe4a44ffde30ed374970f41aeb6c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:dff89ecf556a72643cae9ba63b00813fc83b9a124947dc25c0255d7474208007 · sha256:2ba42769d7b2898a… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/6f05611728e9d0ab024832a4f1abb74a5f5d0bb0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:dff89ecf556a72643cae9ba63b00813fc83b9a124947dc25c0255d7474208007 · sha256:2ba42769d7b2898a… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/bf197c7c79ef6458d1ee84dd7db251b51784885f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:dff89ecf556a72643cae9ba63b00813fc83b9a124947dc25c0255d7474208007 · sha256:2ba42769d7b2898a… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/d9b9affd103f51b42322da4ed5ac025b560bc354"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:dff89ecf556a72643cae9ba63b00813fc83b9a124947dc25c0255d7474208007 · sha256:2ba42769d7b2898a… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/db93ae6fa66f1c61ae63400191195e3ee58021da"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:dff89ecf556a72643cae9ba63b00813fc83b9a124947dc25c0255d7474208007 · sha256:2ba42769d7b2898a… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/fc23d05f0b3fb4d80657e7afebae2cae686b31c8"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:dff89ecf556a72643cae9ba63b00813fc83b9a124947dc25c0255d7474208007 · sha256:2ba42769d7b2898a… · /containers/cna/references/2

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer