CVE-2025-21780

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() It malicious user provides a small pptable through sysfs and then a bigger pptable, it may cause buffer overflow attack in function smu_sys_set_pp_table().

Score

CVSS 3.1 7.8 High

Status

Modified - 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2025-02-27

Last modified

2026-10-15

Weaknesses

CWE-120

Affected products

• Linux Kernel (Linux)
• Simatic S7-1500 Cpu 1518-4 Pndp Mfp (Siemens)
• Simatic S7-1500 Cpu 1518f-4 Pndp Mfp (Siemens)
• Siplus S7-1500 Cpu 1518-4 Pndp Mfp (Siemens)

References

• https://git.kernel.org/stable/c/3484ea33157bc7334f57e64826ec5a4bf992151a
• https://git.kernel.org/stable/c/e43a8b9c4d700ffec819c5043a48769b3e7d9cab
• https://git.kernel.org/stable/c/2498d2db1d35e88a2060ea191ae75dce853dd084
• https://git.kernel.org/stable/c/231075c5a8ea54f34b7c4794687baa980814e6de
• https://git.kernel.org/stable/c/1abb2648698bf10783d2236a6b4a7ca5e8021699
• https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html
• https://cert-portal.siemens.com/productcert/html/ssa-457936.html