CVE-2025-71291

medium Red Hat
Published: May 6, 2026 (8 days ago)
Last Modified: May 6, 2026
Vendor: Red Hat
Source: REDHAT

Description

A flaw was found in the Linux kernel's `bcm_vk` module. A null-pointer dereference can occur within the `bcm_vk_read()` function if a specific condition is met where a pointer `entry` is NULL and an error code `-EMSGSIZE` is returned. This vulnerability could allow a local attacker to cause system instability or a denial of service (DoS).

CWE

CWE-476

Affected Products

Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9

References