Log in Start free

Vulnerability · Published May 1, 2025 · Assigned by Linux

CVE-2025-23159media: venus: hfi: add a check to handle OOB in sfr region

High 8.4

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.2%top 86.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to allocated size for such cases.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.135-1DEBIAN-CVE-2025-23159
Debian:13linux6.12.25-1DEBIAN-CVE-2025-23159
Debian:14linux6.12.25-1DEBIAN-CVE-2025-23159
Ubuntu:22.04:LTSlinux5.15.0-144.157UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux5.15.0-144.157USN-7654-1
Ubuntu:24.04:LTSlinux6.8.0-100.100USN-8028-1
Ubuntu:24.04:LTSlinux6.8.0-100.100UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-aws5.15.0-1088.95UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-aws5.15.0-1088.95USN-7654-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1046.49UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-aws6.8.0-1046.49USN-8028-5
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1046.49~22.04.1USN-8028-5
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-azure5.15.0-1094.103UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-azure5.15.0-1094.103USN-7711-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1046.52USN-8074-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1046.52UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1USN-8126-1
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1094.103.1UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1046.53UBUNTU-CVE-2025-23159
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1046.53~22.04.1UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-gcp5.15.0-1087.96UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-gcp5.15.0-1087.96USN-7654-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1047.50USN-8031-3
Ubuntu:24.04:LTSlinux-gcp6.8.0-1047.50UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1047.50~22.04.2USN-8031-1
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1047.50~22.04.2UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-gke5.15.0-1085.91USN-7654-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1085.91UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-gke6.8.0-1043.48UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-gke6.8.0-1043.48USN-8031-3
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1070.78USN-7654-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1070.78UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1030.33UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1030.33USN-8028-5
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-100.100~22.04.1USN-8028-6
Ubuntu:22.04:LTSlinux-ibm5.15.0-1080.83UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-ibm5.15.0-1080.83USN-7654-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1044.44UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-ibm6.8.0-1044.44USN-8028-8
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1044.44~22.04.1UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1044.44~22.04.1USN-8028-8
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1083.89UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1083.89USN-7654-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1084.89USN-7654-4
Ubuntu:22.04:LTSlinux-kvm5.15.0-1084.89UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-144.157USN-7654-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-144.157UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-100.100.1USN-8052-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-100.100.1UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-100.100.1~22.04.1UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-100.100.1~22.04.1USN-8028-6
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1082.83UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1082.83USN-7654-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1046.49UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1046.49USN-8028-5
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1046.49~22.04.1USN-8028-5
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1046.49.1USN-8028-7
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1046.49.1UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1041.41USN-7654-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1041.41UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1020.20UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1030.30UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1030.30USN-7654-1
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-oracle5.15.0-1085.91USN-7654-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1085.91UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-oracle6.8.0-1043.44USN-8028-5
Ubuntu:24.04:LTSlinux-oracle6.8.0-1043.44UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1043.44~22.04.1USN-8028-5
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1043.44~22.04.1UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-raspi5.15.0-1083.86UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-raspi6.8.0-1047.51UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-raspi6.8.0-1047.51USN-8028-1
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-23159
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1023.24UBUNTU-CVE-2025-23159
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1023.24USN-8052-2
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1052.56USN-7654-5
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1052.56UBUNTU-CVE-2025-23159

Affected products (as reported)

VendorProductVersions
Linux Linux d96d3f30c0f2f564f6922bf4ccdf4464992e31fb – before 4dd109038d513b92d4d33524ffc89ba32e02ba48d96d3f30c0f2f564f6922bf4ccdf4464992e31fb – before 8879397c0da5e5ec1515262995e82cdfd61b282ad96d3f30c0f2f564f6922bf4ccdf4464992e31fb – before 1b8fb257234e7d2d4b3f48af07c5aa5e11c71634d96d3f30c0f2f564f6922bf4ccdf4464992e31fb – before 4e95233af57715d81830fe82b408c633edff59f4d96d3f30c0f2f564f6922bf4ccdf4464992e31fb – before 5af611c70fb889d46d2f654b8996746e59556750d96d3f30c0f2f564f6922bf4ccdf4464992e31fb – before 530f623f56a6680792499a8404083e17f8ec51f4d96d3f30c0f2f564f6922bf4ccdf4464992e31fb – before a062d8de0be5525ec8c52f070acf7607ec8cbfe4d96d3f30c0f2f564f6922bf4ccdf4464992e31fb – before d78a8388a27b265fcb2b8d064f088168ac9356b0
Linux Linux 4.13

References