In the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after reading from shared memory Add a check to ensure that the packet size does not exceed the number of available words after reading the packet header from shared memory. This ensures that the size provided by the firmware is safe to process and prevent potential out-of-bounds memory access.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/0520c89f6280d2b60ab537d5743601185ee7d8ab cve-icon cve-icon
https://git.kernel.org/stable/c/2d8cea8310a245730816a1fd0c9fa4a5a3bdc68c cve-icon cve-icon
https://git.kernel.org/stable/c/49befc830daa743e051a65468c05c2ff9e8580e6 cve-icon cve-icon
https://git.kernel.org/stable/c/7638bae4539dcebc3f68fda74ac35d73618ec440 cve-icon cve-icon
https://git.kernel.org/stable/c/ba567c2e52fbcf0e20502746bdaa79e911c2e8cf cve-icon cve-icon
https://git.kernel.org/stable/c/ef09b96665f16f3f0bac4e111160e6f24f1f8791 cve-icon cve-icon
https://git.kernel.org/stable/c/f0cbd9386f974d310a0d20a02e4a1323e95ea654 cve-icon cve-icon
https://git.kernel.org/stable/c/f5b7a943055a4a106d40a03bacd940e28cc1955f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025090550-CVE-2025-39710-198c@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-39710 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-39710 cve-icon
History

Sat, 06 Sep 2025 09:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Sat, 06 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 05 Sep 2025 17:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after reading from shared memory Add a check to ensure that the packet size does not exceed the number of available words after reading the packet header from shared memory. This ensures that the size provided by the firmware is safe to process and prevent potential out-of-bounds memory access.
Title media: venus: Add a check for packet size after reading from shared memory
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-05T17:21:17.243Z

Updated: 2025-09-05T17:21:17.243Z

Reserved: 2025-04-16T07:20:57.116Z

Link: CVE-2025-39710

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-05T18:15:48.333

Modified: 2025-09-08T16:25:38.810

Link: CVE-2025-39710

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-09-05T00:00:00Z

Links: CVE-2025-39710 - Bugzilla