VDB

DEBIAN-CVE-2025-37879

DEBIAN-CVE-2025-37879 PUBLISHED CVSS 7.099999904632568 HIGH

In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative read/write replies In p9_client_write() and p9_client_read_once(), if the server incorrectly replies with success but a negative write/read count then we would consider written (negative) <= rsize (positive) because both variables were signed. Make variables unsigned to avoid this problem. The reproducer linked below now fails with the following error instead of a null pointer deref: 9pnet: bogus RWRITE count (4294967295 > 3)

Risk Scores

CVSS 3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected Products

VendorProductVersions
Debian:14linux0
Debian:13linux0
Debian:12linux6.1.106-1, 6.1.106-2, 6.1.106-3

Timeline

  • May 9, 2025 CVE Published
  • Sep 1, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›