CVE-2025-39710: media: venus: Add a check for packet size after reading from shared memory
In the Linux kernel, the following vulnerability has been resolved:
media: venus: Add a check for packet size after reading from shared memory
Add a check to ensure that the packet size does not exceed the number of available words after reading the packet header from shared memory. This ensures that the size provided by the firmware is safe to process and prevent potential out-of-bounds memory access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In the Linux kernel media: venus code, after reading the packet header from shared memory, check that the firmware-provided packet size does not exceed the number of available words before processing the packet.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39710?
CVE-2025-39710 has a medium severity level due to potential impacts on system stability and reliability.
How do I fix CVE-2025-39710?
To fix CVE-2025-39710, update your Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2025-39710?
CVE-2025-39710 affects the Linux kernel, particularly versions prior to the fix implementation.
What kind of vulnerability is CVE-2025-39710?
CVE-2025-39710 is a vulnerability that involves improper handling of packet sizes in shared memory read operations.
Is there a workaround for CVE-2025-39710?
There is no official workaround for CVE-2025-39710; updating the kernel is the recommended action.