CVE-2025-23159
media: venus: hfi: add a check to handle OOB in sfr region
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
01 mai 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
In the Linux kernel, the following vulnerability has been resolved:
media: venus: hfi: add a check to handle OOB in sfr region
sfr->buf_size is in shared memory and can be modified by malicious user.
OOB write is possible when the size is made higher than actual sfr data
buffer. Cap the size to allocated size for such cases.
Produtos afetados
Linux · LinuxReferências
https://git.kernel.org/stable/c/1b8fb257234e7d2d4b3f48af07c5aa5e11c71634https://git.kernel.org/stable/c/4dd109038d513b92d4d33524ffc89ba32e02ba48https://git.kernel.org/stable/c/4e95233af57715d81830fe82b408c633edff59f4https://git.kernel.org/stable/c/530f623f56a6680792499a8404083e17f8ec51f4https://git.kernel.org/stable/c/5af611c70fb889d46d2f654b8996746e59556750https://git.kernel.org/stable/c/8879397c0da5e5ec1515262995e82cdfd61b282ahttps://git.kernel.org/stable/c/a062d8de0be5525ec8c52f070acf7607ec8cbfe4https://git.kernel.org/stable/c/d78a8388a27b265fcb2b8d064f088168ac9356b0https://git.kernel.org/stable/c/f4b211714bcc70effa60c34d9fa613d182e3ef1ehttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.htmlhttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html