Out-of-Bounds Memory Access Vulnerability in Linux Kernel Media Component

CVE-2025-39710

What is CVE-2025-39710?

A vulnerability in the Linux kernel media component allows for potential out-of-bounds memory access due to a lack of checks on packet size after reading from shared memory. This oversight allows malicious actors to exploit packet size values provided by firmware, potentially leading to unauthorized access or crashes. The recent update addresses this issue by implementing robust checks to ensure packet sizes do not exceed the allocated memory, thereby securing the kernel's operation.

References