In the Linux kernel, the following vulnerability has been resolved:
media: vivid: Change the siize of the composing
syzkaller found a bug:
BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_pattern drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 [inline] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1a9c/0x5af0 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2705 Write of size 1440 at addr ffffc9000d0ffda0 by task vivid-000-vid-c/5304
CPU: 0 UID: 0 PID: 5304 Comm: vivid-000-vid-c Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x169/0x550 mm/kasan/report.c:489 kasan_report+0x143/0x180 mm/kasan/report.c:602 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189 __asan_memcpy+0x40/0x70 mm/kasan/shadow.c:106 tpg_fill_plane_pattern drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 [inline] tpg_fill_plane_buffer+0x1a9c/0x5af0 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2705 vivid_fillbuff drivers/media/test-drivers/vivid/vivid-kthread-cap.c:470 [inline] vivid_thread_vid_cap_tick+0xf8e/0x60d0 drivers/media/test-drivers/vivid/vivid-kthread-cap.c:629 vivid_thread_vid_cap+0x8aa/0xf30 drivers/media/test-drivers/vivid/vivid-kthread-cap.c:767 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK>
The composition size cannot be larger than the size of fmt_cap_rect. So execute v4l2_rect_map_inside() even if has_compose_cap == 0.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 7, 2025 | Jul 4, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-macrosUpgrade dtb-apmUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade dtb-armUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kselftests-kmp-rtUpgrade kernel-debug | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intelUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-azure-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-genericUpgrade linux-image-oracle-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-kvm-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-aws-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-5.15Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-generic-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-xilinxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-gcpUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.14.0-1015-oracle | Jul 9, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub