In the Linux kernel, the following vulnerability has been resolved:
media: venus: hfi: add a check to handle OOB in sfr region
sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to allocated size for such cases.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 5, 2025 | May 1, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-qcomUpgrade dtb-armUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade reiserfs-kmp-default | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-nvidiaUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-genericUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-fips-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-lowlatency-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-gke-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-gcp-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-lowlatency | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub