CVE-2025-39787: soc: qcom: mdt_loader: Ensure we don't read past the ELF header
In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: mdtloader: Ensure we don't read past the ELF header
When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients.
Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. ephentsize and eshentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39787?
CVE-2025-39787 has a high severity level due to the potential for unauthorized access and data leakage.
How do I fix CVE-2025-39787?
To fix CVE-2025-39787, ensure that you update your Linux kernel to the latest version where the vulnerability is patched.
Which software is affected by CVE-2025-39787?
CVE-2025-39787 affects the Linux kernel, particularly when the MDT loader is used in remoteproc.
What type of vulnerability is CVE-2025-39787?
CVE-2025-39787 is categorized as a memory disclosure vulnerability due to improper handling of ELF headers.
Is CVE-2025-39787 actively being exploited?
As of the latest information, there are no known active exploits for CVE-2025-39787, but it is important to apply patches promptly.