In the Linux kernel, the following vulnerability has been resolved:
media: venus: hfi_parser: refactor hfi packet parsing logic
words_count denotes the number of words in total payload, while data points to payload of various property within it. When words_count reaches last word, data can access memory beyond the total payload. This can lead to OOB access. With this patch, the utility api for handling individual properties now returns the size of data consumed. Accordingly remaining bytes are calculated before parsing the payload, thereby eliminates the OOB access possibilities.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Suse | — | Upgrade kernel-sourceUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-source-rt | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-azure-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-5.15Upgrade linux-image-aws-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-6.8Upgrade linux-image-raspiUpgrade linux-image-fips-6.8Upgrade linux-image-xilinxUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-intelUpgrade linux-image-raspi-5.15Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-kvm-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-realtime-5.15Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-5.15Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-ibmUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidiaUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-gkeop-6.8 | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub