Out-of-bounds Stack Access Vulnerability in Linux Kernel by The Linux Foundation

CVE-2025-39778

Summary

A vulnerability exists in the Linux kernel's nvmet_ctrl_state_show() function where the iteration code exceeds the bounds of the csts_state_names[] array, leading to a potential out-of-bounds stack read. This flaw can cause unexpected behavior in the kernel, including warnings related to unexpected end of section in objtool and may impact system stability and security.

References