Skip to content
fr Sign in
7.8 High

CVE-2025-39787 In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the…

Description

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.

Affected products and versions

Product Affected versions Fixed in
Linux 6.17 earliest → < 6.17 6.17
Linux 6.16 earliest → < 6.16.4 6.16.4
Linux 6.12 earliest → < 6.12.44 6.12.44
Linux 6.6 earliest → < 6.6.103 6.6.103
Linux 6.1 earliest → < 6.1.149 6.1.149
Linux 5.15 earliest → < 5.15.190 5.15.190
Linux 5.10 earliest → < 5.10.241 5.10.241
Linux 5.4 earliest → < 5.4.297 5.4.297
Linux 4.11 No fix stated
Show the 4 other branches
Product Affected versions Fixed in
SIMATIC CN 4100 5.0 earliest → < 5.0 5.0
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Linux

The 18283 CVEs of Linux →
CVE-2026-99270 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler() 8.1 High CVE-2026-99269 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before… 7.8 High CVE-2026-99261 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for… Not rated CVE-2026-99260 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags… Not rated
Track this CVE