In the Linux kernel, the following vulnerability has been resolved:
media: venus: hfi_parser: add check to avoid out of bound access
There is a possibility that init_codecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecs_count can get incremented to value more than MAX_CODEC_NUM, there can be OOB access. Reset the count so that it always starts from beginning.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 5, 2025 | May 1, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade dtb-appleUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-sourceUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-devel | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-kvmUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-genericUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-5.15Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-intelUpgrade linux-image-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-ibm-5.15Upgrade linux-image-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-intel-iotg-5.15 | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub