CVE-2025-71133

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: avoid invalid read in irdma_net_event

irdma_net_event() should not dereference anything from "neigh" (alias

"ptr") until it has checked that the event is NETEVENT_NEIGH_UPDATE.

Other events come with different structures pointed to by "ptr" and they

may be smaller than struct neighbour.

Move the read of neigh->dev under the NETEVENT_NEIGH_UPDATE case.

The bug is mostly harmless, but it triggers KASAN on debug kernels:

BUG: KASAN: stack-out-of-bounds in irdma_net_event+0x32e/0x3b0 [irdma]

Read of size 8 at addr ffffc900075e07f0 by task kworker/27:2/542554

CPU: 27 PID: 542554 Comm: kworker/27:2 Kdump: loaded Not tainted 5.14.0-630.el9.x86_64+debug #1

Hardware name: [...]

Workqueue: events rt6_probe_deferred

Call Trace:

<IRQ>

dump_stack_lvl+0x60/0xb0

print_address_description.constprop.0+0x2c/0x3f0

print_report+0xb4/0x270

kasan_report+0x92/0xc0

irdma_net_event+0x32e/0x3b0 [irdma]

noti

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References