CVE-2025-23159 Information

Description

In the Linux kernel the following vulnerability has been resolved:

media: venus: hfi: add a check to handle OOB in sfr region

sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to allocated size for such cases.

Reference

https://git.kernel.org/stable/c/4e95233af57715d81830fe82b408c633edff59f4 https://git.kernel.org/stable/c/530f623f56a6680792499a8404083e17f8ec51f4 https://git.kernel.org/stable/c/5af611c70fb889d46d2f654b8996746e59556750 https://git.kernel.org/stable/c/a062d8de0be5525ec8c52f070acf7607ec8cbfe4 https://git.kernel.org/stable/c/d78a8388a27b265fcb2b8d064f088168ac9356b0 https://git.kernel.org/stable/c/f4b211714bcc70effa60c34d9fa613d182e3ef1e