In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients.
Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Sep 11, 2025 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-syms-rtUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade gfs2-kmp-rt | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gke-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-azure-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-lowlatency-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-ibm-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-virtualUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-realtimeUpgrade linux-image-xilinxUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intelUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k | Dec 5, 2025 | Sep 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub