CVE-2025-23159: media: venus: hfi: add a check to handle OOB in sfr region
In the Linux kernel, the following vulnerability has been resolved:
media: venus: hfi: add a check to handle OOB in sfr region
sfr->bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to allocated size for such cases.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23159?
CVE-2025-23159 has a high severity due to the potential for out-of-bounds write vulnerabilities that can be exploited by malicious users.
How do I fix CVE-2025-23159?
To fix CVE-2025-23159, update your Linux kernel to the latest stable version that includes the security patch.
What impact does CVE-2025-23159 have on affected systems?
CVE-2025-23159 can allow attackers to modify shared memory regions, leading to potential denial of service or code execution on affected systems.
Which versions of the Linux kernel are affected by CVE-2025-23159?
CVE-2025-23159 affects various versions of the Linux kernel prior to the patches being applied.
Is CVE-2025-23159 being actively exploited?
As of the latest updates, there are no confirmed reports of active exploitation of CVE-2025-23159 in the wild.