CVE-2025-23159

media: venus: hfi: add a check to handle OOB in sfr region

Description

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to allocated size for such cases.

N/A

CVSS

Severity:

EPSS 0.04%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/4dd109038d513b92d4d33524ffc89ba32e02ba48
https://git.kernel.org/stable/c/8879397c0da5e5ec1515262995e82cdfd61b282a
https://git.kernel.org/stable/c/1b8fb257234e7d2d4b3f48af07c5aa5e11c71634
https://git.kernel.org/stable/c/4e95233af57715d81830fe82b408c633edff59f4
https://git.kernel.org/stable/c/5af611c70fb889d46d2f654b8996746e59556750
https://git.kernel.org/stable/c/530f623f56a6680792499a8404083e17f8ec51f4
https://git.kernel.org/stable/c/a062d8de0be5525ec8c52f070acf7607ec8cbfe4
https://git.kernel.org/stable/c/d78a8388a27b265fcb2b8d064f088168ac9356b0
https://git.kernel.org/stable/c/f4b211714bcc70effa60c34d9fa613d182e3ef1e

Frequently Asked Questions

What is the severity of CVE-2025-23159?: CVE-2025-23159 has not yet been assigned a CVSS score.
How to fix CVE-2025-23159?: To fix CVE-2025-23159, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2025-23159 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2025-23159 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-23159?: CVE-2025-23159 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.