In the Linux kernel, the following vulnerability has been resolved:
media: venus: hfi: add a check to handle OOB in sfr region
sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to allocated size for such cases.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 5, 2025 | May 1, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Suse | — | Upgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade dtb-apmUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade kernel-default-develUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rt | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-raspiUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-genericUpgrade linux-image-nvidia-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-gke-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64kUpgrade linux-image-azure-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-intelUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-fips-5.15Upgrade linux-image-gkeUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-fipsUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-oem-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-64k | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub