Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-39778

objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() The csts_state_names[] array only has six sparse entries, but the iteration code in nvmet_ctrl_state_show() iterates seven, resulting in a potential out-of-bounds stack read. Fix that. Fixes the following warning with an UBSAN kernel: vmlinux.o: warning: objtool: .text.nvmet_ctrl_state_show: unexpected end of section

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 649fd41420a816b11b07423ebf4dbd4ac1ac2905 to < 1adc93a525fdee8e2b311e6d5fd93eb69714ca05affected
  • 649fd41420a816b11b07423ebf4dbd4ac1ac2905 to < 8fbf37a3577b4d64c150cafde338eee17b2f2ea4affected
  • 649fd41420a816b11b07423ebf4dbd4ac1ac2905 to < 0cc0efc58d6c741b2868d4af24874d7fec28a575affected
  • 649fd41420a816b11b07423ebf4dbd4ac1ac2905 to < 107a23185d990e3df6638d9a84c835f963fe30a6affected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 6.12.23 to ≤ 6.12.*unaffected
  • 6.13.11 to ≤ 6.13.*unaffected
  • 6.14.2 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References