CVE-2025-23159
HIGH severity · CVSS 8.4 · Out-of-bounds write
8.4CVSS HIGH
Summary
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to allocated size for such cases.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredNone
User interactionNone
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products we track (2)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Official patch: https://git.kernel.org/stable/c/1b8fb257234e7d2d4b3f48af07c5aa5e11c71634 ↗
Additional information
- NVD record
- https://git.kernel.org/stable/c/1b8fb257234e7d2d4b3f48af07c5aa5e11c71634Patch
- https://git.kernel.org/stable/c/4dd109038d513b92d4d33524ffc89ba32e02ba48Patch
- https://git.kernel.org/stable/c/4e95233af57715d81830fe82b408c633edff59f4Patch
- https://git.kernel.org/stable/c/530f623f56a6680792499a8404083e17f8ec51f4Patch
- https://git.kernel.org/stable/c/5af611c70fb889d46d2f654b8996746e59556750Patch
- https://git.kernel.org/stable/c/8879397c0da5e5ec1515262995e82cdfd61b282aPatch
- https://git.kernel.org/stable/c/a062d8de0be5525ec8c52f070acf7607ec8cbfe4Patch
- https://git.kernel.org/stable/c/d78a8388a27b265fcb2b8d064f088168ac9356b0Patch