CVE-2025-71064

net: hns3: using the num_tqps in the vf driver to apply for resources

State: Published
Severity: Not scored
Published: Jan 13, 2026
Updated: Oct 15, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: using the num_tqps in the vf driver to apply for resources

Currently, hdev->htqp is allocated using hdev->num_tqps, and kinfo->tqp is allocated using kinfo->num_tqps. However, kinfo->num_tqps is set to min(new_tqps, hdev->num_tqps); Therefore, kinfo->num_tqps may be smaller than hdev->num_tqps, which causes some hdev->htqp[i] to remain uninitialized in hclgevf_knic_setup().

Thus, this patch allocates hdev->htqp and kinfo->tqp using hdev->num_tqps, ensuring that the lengths of hdev->htqp and kinfo->tqp are consistent and that all elements are properly initialized.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before c149decd8c18ae6acdd7a6041d74507835cf26e6Affected e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before bcefdb288eedac96fd2f583298927e9c6c481489Affected e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 6cd8a2930df850f4600fe8c57d0662b376520281Affected e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 1956d47a03eb625951e9e070db39fe2590e27510Affected e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 429f946a7af3fbf08761d218746cd4afa80a7954Affected e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 62f28d79a6186a602a9d926a2dbb5b12b6867df7Affected e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before c2a16269742e176fccdd0ef9c016a233491a49adAffected
LinuxLinux	4.16Affected before 4.16Not affected 5.10.248 through 5.10.Not affected 5.15.198 through 5.15.Not affected 6.1.160 through 6.1.Not affected 6.6.120 through 6.6.Not affected 6.12.64 through 6.12.Not affected 6.18.3 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before c149decd8c18ae6acdd7a6041d74507835cf26e6Affected
e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before bcefdb288eedac96fd2f583298927e9c6c481489Affected
e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 6cd8a2930df850f4600fe8c57d0662b376520281Affected
e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 1956d47a03eb625951e9e070db39fe2590e27510Affected
e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 429f946a7af3fbf08761d218746cd4afa80a7954Affected
e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 62f28d79a6186a602a9d926a2dbb5b12b6867df7Affected
e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before c2a16269742e176fccdd0ef9c016a233491a49adAffected

LinuxLinux

4.16Affected
before 4.16Not affected
5.10.248 through 5.10.*Not affected
5.15.198 through 5.15.*Not affected
6.1.160 through 6.1.*Not affected
6.6.120 through 6.6.*Not affected
6.12.64 through 6.12.*Not affected
6.18.3 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.