Home

Description

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to allocated size for such cases.

PUBLISHED Reserved 2025-01-11 | Published 2025-05-01 | Updated 2026-05-11 | Assigner Linux

Product status

Default status
unaffected

d96d3f30c0f2f564f6922bf4ccdf4464992e31fb (git) before 4dd109038d513b92d4d33524ffc89ba32e02ba48
affected

d96d3f30c0f2f564f6922bf4ccdf4464992e31fb (git) before 8879397c0da5e5ec1515262995e82cdfd61b282a
affected

d96d3f30c0f2f564f6922bf4ccdf4464992e31fb (git) before 1b8fb257234e7d2d4b3f48af07c5aa5e11c71634
affected

d96d3f30c0f2f564f6922bf4ccdf4464992e31fb (git) before 4e95233af57715d81830fe82b408c633edff59f4
affected

d96d3f30c0f2f564f6922bf4ccdf4464992e31fb (git) before 5af611c70fb889d46d2f654b8996746e59556750
affected

d96d3f30c0f2f564f6922bf4ccdf4464992e31fb (git) before 530f623f56a6680792499a8404083e17f8ec51f4
affected

d96d3f30c0f2f564f6922bf4ccdf4464992e31fb (git) before a062d8de0be5525ec8c52f070acf7607ec8cbfe4
affected

d96d3f30c0f2f564f6922bf4ccdf4464992e31fb (git) before d78a8388a27b265fcb2b8d064f088168ac9356b0
affected

d96d3f30c0f2f564f6922bf4ccdf4464992e31fb (git) before f4b211714bcc70effa60c34d9fa613d182e3ef1e
affected

Default status
affected

4.13
affected

Any version before 4.13
unaffected

5.4.293 (semver)
unaffected

5.10.237 (semver)
unaffected

5.15.181 (semver)
unaffected

6.1.135 (semver)
unaffected

6.6.88 (semver)
unaffected

6.12.24 (semver)
unaffected

6.13.12 (semver)
unaffected

6.14.3 (semver)
unaffected

6.15 (original_commit_for_fix)
unaffected

References

lists.debian.org/debian-lts-announce/2025/05/msg00045.html

lists.debian.org/debian-lts-announce/2025/05/msg00030.html

git.kernel.org/...c/4dd109038d513b92d4d33524ffc89ba32e02ba48

git.kernel.org/...c/8879397c0da5e5ec1515262995e82cdfd61b282a

git.kernel.org/...c/1b8fb257234e7d2d4b3f48af07c5aa5e11c71634

git.kernel.org/...c/4e95233af57715d81830fe82b408c633edff59f4

git.kernel.org/...c/5af611c70fb889d46d2f654b8996746e59556750

git.kernel.org/...c/530f623f56a6680792499a8404083e17f8ec51f4

git.kernel.org/...c/a062d8de0be5525ec8c52f070acf7607ec8cbfe4

git.kernel.org/...c/d78a8388a27b265fcb2b8d064f088168ac9356b0

git.kernel.org/...c/f4b211714bcc70effa60c34d9fa613d182e3ef1e

cve.org (CVE-2025-23159)

nvd.nist.gov (CVE-2025-23159)

Download JSON