In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients.
Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Sep 11, 2025 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-default-manUpgrade dtb-renesasUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-defaultUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-debugUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kb | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-64k-5.15Upgrade linux-image-azureUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gkeopUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intelUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-fips-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-virtualUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-xilinxUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k | Dec 5, 2025 | Sep 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub