In the Linux kernel, the following vulnerability has been resolved:
media: venus: hfi: add a check to handle OOB in sfr region
sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to allocated size for such cases.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Suse | — | Upgrade kernel-64kbUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debugUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade dtb-apmUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade kernel-azure-devel | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gkeUpgrade linux-image-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-aws-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-awsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gke-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-kvmUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-intelUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub