In the Linux kernel, the following vulnerability has been resolved:
media: venus: hfi: add check to handle incorrect queue size
qsize represents size of shared queued between driver and video firmware. Firmware can modify this value to an invalid large value. In such situation, empty_space will be bigger than the space actually available. Since new_wr_idx is not checked, so the following code will result in an OOB write. ... qsize = qhdr->q_size
if (wr_idx >= rd_idx) empty_space = qsize - (wr_idx - rd_idx) .... if (new_wr_idx < qsize) { memcpy(wr_ptr, packet, dwords << 2) --> OOB write
Add check to ensure qsize is within the allocated size while reading and writing packets into the queue.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 5, 2025 | May 1, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade dtb-amazonUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade dtb-renesasUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rt | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-realtimeUpgrade linux-image-realtime-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-azureUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-intelUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-awsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub