In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients.
Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Sep 11, 2025 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade dtb-renesasUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade kernel-rt-optionalUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-debugUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade dtb-qcomUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-azureUpgrade gfs2-kmp-default | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-raspiUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-aws-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-azureUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-64k-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-xilinxUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-awsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intelUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64k | Dec 5, 2025 | Sep 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub