Buffer Size Overflow Vulnerability in Linux Kernel Affecting UdmaBuf Functionality

CVE-2025-37803

What is CVE-2025-37803?

A buffer size overflow vulnerability has been identified in the Linux kernel affecting the udmabuf functionality. This issue arises during the creation of udmabuf due to a failure to properly handle size_limits, which can lead to memory allocation errors. The vulnerability has been addressed by ensuring that size_limit_mb is correctly cast to a 64-bit integer (u64) while calculating pglimit. Users are advised to apply the available patches to enhance the security of their systems and prevent exploitation.

References