Description
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: add check to avoid out of bound access There is a possibility that init_codecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecs_count can get incremented to value more than MAX_CODEC_NUM, there can be OOB access. Reset the count so that it always starts from beginning.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1a73374a04e555103e5369429a30999114001dda to < e5133a0b25463674903fdc0528e0a29b7267130eaffected1a73374a04e555103e5369429a30999114001dda to < 2b8b9ea4e26a501eb220ea189e42b4527e65bdfaaffected1a73374a04e555103e5369429a30999114001dda to < 1ad6aa1464b8a5ce5c194458315021e8d216108eaffected1a73374a04e555103e5369429a30999114001dda to < 26bbedd06d85770581fda5d78e78539bb088fad1affected1a73374a04e555103e5369429a30999114001dda to < d4d88ece4ba91df5b02f1d3f599650f9e9fc0f45affected1a73374a04e555103e5369429a30999114001dda to < 53e376178ceacca3ef1795038b22fc9ef45ff1d3affected1a73374a04e555103e5369429a30999114001dda to < b2541e29d82da8a0df728aadec3e0a8db55d517baffected1a73374a04e555103e5369429a30999114001dda to < cb5be9039f91979f8a2fac29f529f746d7848f3eaffected1a73374a04e555103e5369429a30999114001dda to < 172bf5a9ef70a399bb227809db78442dc01d9e48affected
Linux Linux
Default version status: affected
4.19affected0 to < 4.19unaffected5.4.293 to ≤ 5.4.*unaffected5.10.237 to ≤ 5.10.*unaffected5.15.181 to ≤ 5.15.*unaffected6.1.135 to ≤ 6.1.*unaffected6.6.88 to ≤ 6.6.*unaffected6.12.24 to ≤ 6.12.*unaffected6.13.12 to ≤ 6.13.*unaffected6.14.3 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/e5133a0b25463674903fdc0528e0a29b7267130e ↗
- https://git.kernel.org/stable/c/2b8b9ea4e26a501eb220ea189e42b4527e65bdfa ↗
- https://git.kernel.org/stable/c/1ad6aa1464b8a5ce5c194458315021e8d216108e ↗
- https://git.kernel.org/stable/c/26bbedd06d85770581fda5d78e78539bb088fad1 ↗
- https://git.kernel.org/stable/c/d4d88ece4ba91df5b02f1d3f599650f9e9fc0f45 ↗
- https://git.kernel.org/stable/c/53e376178ceacca3ef1795038b22fc9ef45ff1d3 ↗
- https://git.kernel.org/stable/c/b2541e29d82da8a0df728aadec3e0a8db55d517b ↗
- https://git.kernel.org/stable/c/cb5be9039f91979f8a2fac29f529f746d7848f3e ↗
- https://git.kernel.org/stable/c/172bf5a9ef70a399bb227809db78442dc01d9e48 ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html ↗