Wind River Support Network

HomeDefectsLIN1024-9110
Fixed

LIN1024-9110 : Security Advisory - linux - CVE-2025-23159

Created: May 6, 2025    Updated: May 12, 2025
Resolved Date: May 9, 2025
Found In Version: 10.24.33.1
Fix Version: 10.24.33.9
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

media: venus: hfi: add a check to handle OOB in sfr region

sfr->buf_size is in shared memory and can be modified by malicious user.
OOB write is possible when the size is made higher than actual sfr data
buffer. Cap the size to allocated size for such cases.

CREATE(Triage):(User=admin) CVE-2025-23159 (https://nvd.nist.gov/vuln/detail/CVE-2025-23159)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube