DEBIAN-CVE-2025-71064
In the Linux kernel, the following vulnerability has been resolved: net: hns3: using the num_tqps in the vf driver to apply for resources Currently, hdev->htqp is allocated using hdev->num_tqps, and kinfo->tqp is allocated using kinfo->num_tqps. However, kinfo->num_tqps is set to min(new_tqps, hdev->num_tqps); Therefore, kinfo->num_tqps may be smaller than hdev->num_tqps, which causes some hdev->htqp[i] to remain uninitialized in hclgevf_knic_setup(). Thus, this patch allocates hdev->htqp and kinfo->tqp using hdev->num_tqps, ensuring that the lengths of hdev->htqp and kinfo->tqp are consistent and that all elements are properly initialized.
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | linux | 0, 6.12.41-1, 6.12.43-1 |
| Debian:11 | linux-6.1 | *, *, 6.1.159-1 |
| Debian:13 | linux | 6.12.41-1, 0, 6.12.38-1 |
| Debian:11 | linux | 5.10.179-4, 5.10.178-3, 5.10.162-1 |
| Debian:12 | linux | 6.1.124-1, 6.1.129-1, 6.1.133-1 |
Timeline
- Jan 13, 2026 CVE Published
- Apr 28, 2026 CVE Updated