CVE-2025-21780

Katalog CVE

CVSS 7.8 · High EPSS 0,26%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() It malicious user provides a small pptable through sysfs and then a bigger pptable, it may cause buffer overflow attack in function smu_sys_set_pp_table().

Rincian

Terbit di NVD

27 Februari 2025

Terakhir diubah

14 Juli 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1abb2648698bf10783d2236a6b4a7ca5e8021699 mailing list · patch
• https://git.kernel.org/stable/c/231075c5a8ea54f34b7c4794687baa980814e6de mailing list · patch
• https://git.kernel.org/stable/c/2498d2db1d35e88a2060ea191ae75dce853dd084 mailing list · patch
• https://git.kernel.org/stable/c/3484ea33157bc7334f57e64826ec5a4bf992151a mailing list · patch
• https://git.kernel.org/stable/c/e43a8b9c4d700ffec819c5043a48769b3e7d9cab mailing list · patch
• https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html