In the Linux kernel, the following vulnerability has been resolved:
media: venus: hfi_parser: add check to avoid out of bound access
There is a possibility that init_codecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecs_count can get incremented to value more than MAX_CODEC_NUM, there can be OOB access. Reset the count so that it always starts from beginning.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Suse | — | Upgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade dtb-armUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-debug-develUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-amdUpgrade dlm-kmp-64kb | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-gcp-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-gcpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-oracleUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-gke-5.15Upgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-oem-20.04cUpgrade linux-image-kvm-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-6.8Upgrade linux-image-azureUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-intelUpgrade linux-image-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-gkeop-6.8 | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub