VulnerabilityModified
CVE-2025-37803
In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb to u64 when calculate pglimit.
HIGH 7.8EPSS 0.24%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.24%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb to u64 when calculate pglimit.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.24% probability · 15th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-120
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/021ba7f1babd029e714d13a6bf2571b08af96d0fPatch
- https://git.kernel.org/stable/c/13fe12c037b470321436deec393030c6153cfeb9Patch
- https://git.kernel.org/stable/c/29b65a3171a49c9b69f31035146be966cec40b7a
- https://git.kernel.org/stable/c/2b8419c6ecf69007dcff54ea0b9f0b215282c55aPatch
- https://git.kernel.org/stable/c/373512760e13fdaa726faa9502d0f5be2abb3d33Patch
- https://git.kernel.org/stable/c/3f6c9d66e0f8eb9679b57913aa64b4d2266f6fbePatch
- https://git.kernel.org/stable/c/b2ff4e9c599b000833d16a917f519aa2e4a75de2Patch
- https://git.kernel.org/stable/c/e84a08fc7e25cdad5d9a3def42cc770ff711193fPatch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.