Wind River Support Network

HomeDefectsLIN1024-10395
Fixed

LIN1024-10395 : Security Advisory - gnutls - CVE-2025-6395

Created: Jul 11, 2025    Updated: Aug 13, 2025
Resolved Date: Aug 10, 2025
Found In Version: 10.24.33.1
Fix Version: 10.24.33.12
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Userspace

Description

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite(). When it reads certain settings from a template file, it can allow an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial of service (DoS) that could crash the system.

CREATE(Triage):(User=admin) CVE-2025-6395 (https://nvd.nist.gov/vuln/detail/CVE-2025-6395)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube