FlawAtlas
Search the atlas
CVE-2025-71120 Not scored

SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf A zero length gss_token results in pages == 0 and in_token->pages[0] is NULL. The code unconditionally evaluates page_address(in_token->pages[0]) for the initial memcpy, which can dereference NULL even when the copy length is 0. Guard the first memcpy so it only runs when length > 0.

Exploit probability 0.2%
Published January 14, 2026
Required by Not available
Last source change July 16, 2026

02 / AFFECTED SOFTWARE

Affected packages

Linux Kernel
Unknown Unknown

722 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

related OPENSUSE-SU-2026:20287-1
related SUSE-SU-2026:0350-1
related SUSE-SU-2026:0369-1
related SUSE-SU-2026:0411-1
related SUSE-SU-2026:0447-1
related SUSE-SU-2026:0471-1
related SUSE-SU-2026:0472-1
related SUSE-SU-2026:0473-1
related SUSE-SU-2026:0474-1
related SUSE-SU-2026:0496-1
related SUSE-SU-2026:0587-1
related SUSE-SU-2026:0617-1
related SUSE-SU-2026:1180-1
related SUSE-SU-2026:1185-1
related SUSE-SU-2026:1188-1
related SUSE-SU-2026:1189-1
related SUSE-SU-2026:1212-1
related SUSE-SU-2026:1221-1
related SUSE-SU-2026:1222-1
related SUSE-SU-2026:1225-1
related SUSE-SU-2026:1236-1
related SUSE-SU-2026:1237-1
related SUSE-SU-2026:1239-1
related SUSE-SU-2026:1242-1
related SUSE-SU-2026:1244-1
related SUSE-SU-2026:1248-1
related SUSE-SU-2026:1254-1
related SUSE-SU-2026:1259-1
related SUSE-SU-2026:1261-1
related SUSE-SU-2026:1263-1
related SUSE-SU-2026:1265-1
related SUSE-SU-2026:1268-1
related SUSE-SU-2026:1269-1
related SUSE-SU-2026:1270-1
related SUSE-SU-2026:1271-1
related SUSE-SU-2026:1272-1
related SUSE-SU-2026:1274-1
related SUSE-SU-2026:1278-1
related SUSE-SU-2026:1279-1
related SUSE-SU-2026:1280-1
related SUSE-SU-2026:1281-1
related SUSE-SU-2026:1283-1
related SUSE-SU-2026:1284-1
related SUSE-SU-2026:1285-1
related SUSE-SU-2026:1287-1
related SUSE-SU-2026:1288-1
related SUSE-SU-2026:1293-1
related SUSE-SU-2026:1297-1
related SUSE-SU-2026:1298-1
related SUSE-SU-2026:1304-1
related SUSE-SU-2026:1305-1
related SUSE-SU-2026:20477-1
related SUSE-SU-2026:20498-1
related SUSE-SU-2026:20555-1
related SUSE-SU-2026:20599-1
related SUSE-SU-2026:20615-1
related SUSE-SU-2026:20845-1
related SUSE-SU-2026:20876-1
related SUSE-SU-2026:21005-1
related SUSE-SU-2026:21006-1
related SUSE-SU-2026:21007-1
related SUSE-SU-2026:21008-1
related SUSE-SU-2026:21009-1
related SUSE-SU-2026:21020-1
related SUSE-SU-2026:21041-1
related SUSE-SU-2026:21042-1
related SUSE-SU-2026:21043-1
related SUSE-SU-2026:21044-1
related SUSE-SU-2026:21045-1
related SUSE-SU-2026:21046-1
related SUSE-SU-2026:21047-1
related SUSE-SU-2026:21048-1
related SUSE-SU-2026:21049-1
related SUSE-SU-2026:21050-1
related SUSE-SU-2026:21051-1
related SUSE-SU-2026:21052-1
related SUSE-SU-2026:21053-1
related SUSE-SU-2026:21054-1
related SUSE-SU-2026:21055-1
related SUSE-SU-2026:21056-1
related SUSE-SU-2026:21057-1
related SUSE-SU-2026:21058-1
related SUSE-SU-2026:21059-1
related SUSE-SU-2026:21060-1
related SUSE-SU-2026:21061-1
related SUSE-SU-2026:21071-1
related SUSE-SU-2026:21072-1
related SUSE-SU-2026:21073-1
related SUSE-SU-2026:21074-1
related SUSE-SU-2026:21075-1
related SUSE-SU-2026:21076-1
related SUSE-SU-2026:21077-1
related SUSE-SU-2026:21078-1
related SUSE-SU-2026:21079-1
related SUSE-SU-2026:21080-1
related SUSE-SU-2026:21081-1
related SUSE-SU-2026:21082-1
related SUSE-SU-2026:21083-1
related SUSE-SU-2026:21084-1
related SUSE-SU-2026:21085-1
related SUSE-SU-2026:21086-1
related SUSE-SU-2026:21087-1
related SUSE-SU-2026:21088-1
related SUSE-SU-2026:21089-1
related SUSE-SU-2026:21090-1
related SUSE-SU-2026:21091-1
related SUSE-SU-2026:21096-1
related SUSE-SU-2026:21099-1
related SUSE-SU-2026:21100-1
related SUSE-SU-2026:21102-1
related SUSE-SU-2026:21216-1
related SUSE-SU-2026:21217-1
related SUSE-SU-2026:21219-1
related SUSE-SU-2026:21220-1
related SUSE-SU-2026:21221-1

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2025-71120

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf A zero length gss_token results in pages == 0 and in_token->pages[0] is NULL. The code unconditionally evaluates page_address(in_token->pages[0]) for the initial memcpy, which can dereference NULL even when the copy length is 0. Guard the first memcpy so it only runs when length > 0.

View original source

05 / REFERENCES

Further evidence