5.5

CVE-2025-23159

media: venus: hfi: add a check to handle OOB in sfr region

In the Linux kernel, the following vulnerability has been resolved:

media: venus: hfi: add a check to handle OOB in sfr region

sfr->buf_size is in shared memory and can be modified by malicious user.
OOB write is possible when the size is made higher than actual sfr data
buffer. Cap the size to allocated size for such cases.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.13 < 5.4.293
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.237
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.181
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.135
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.88
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.24
Linux ≫ Linux Kernel Version >= 6.13 < 6.13.12
Linux ≫ Linux Kernel Version >= 6.14 < 6.14.3
Debian ≫ Debian Linux Version11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.073
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://git.kernel.org/stable/c/4e95233af57715d81830fe82b408c633edff59f4
Patch
https://git.kernel.org/stable/c/5af611c70fb889d46d2f654b8996746e59556750
Patch
https://git.kernel.org/stable/c/530f623f56a6680792499a8404083e17f8ec51f4
Patch
https://git.kernel.org/stable/c/a062d8de0be5525ec8c52f070acf7607ec8cbfe4
Patch
https://git.kernel.org/stable/c/d78a8388a27b265fcb2b8d064f088168ac9356b0
Patch
https://git.kernel.org/stable/c/f4b211714bcc70effa60c34d9fa613d182e3ef1e
Patch
https://git.kernel.org/stable/c/1b8fb257234e7d2d4b3f48af07c5aa5e11c71634
Patch
https://git.kernel.org/stable/c/4dd109038d513b92d4d33524ffc89ba32e02ba48
Patch
https://git.kernel.org/stable/c/8879397c0da5e5ec1515262995e82cdfd61b282a
Patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
Mailing List
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
Mailing List