BaseFortify

Publication date: 2025-10-28

Last updated on: 2025-10-30

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: dlink: handle copy_thresh allocation failure The driver did not handle failure of `netdev_alloc_skb_ip_align()`. If the allocation failed, dereferencing `skb->protocol` could lead to a NULL pointer dereference. This patch tries to allocate `skb`. If the allocation fails, it falls back to the normal path. Tested-on: D-Link DGE-550T Rev-A3

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-28

Last Modified

2025-10-30

Generated

2026-07-06

AI Q&A

2025-10-28

EPSS Evaluated

2026-07-05

NVD

CVE-2025-40053

Affected Vendors & Products

Vendor	Product	Version / Range
dlink	dge-550t	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's D-Link network driver occurs because the driver does not properly handle the failure of the function netdev_alloc_skb_ip_align(), which allocates memory for network packets. If this allocation fails, the driver may dereference a NULL pointer (skb->protocol), leading to a NULL pointer dereference error.

Impact Analysis

The impact of this vulnerability is that it can cause a NULL pointer dereference in the network driver, which may lead to a kernel crash or system instability, potentially resulting in denial of service.

Hi! I’m here to help you understand CVE-2025-40053. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70