CVE-2025-21780Classic Buffer Overflow in Linux

Severity
7.8HIGHNVD
OSV5.5OSV4.7
EPSS
0.0%
top 97.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 27
Latest updateApr 13

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() It malicious user provides a small pptable through sysfs and then a bigger pptable, it may cause buffer overflow attack in function smu_sys_set_pp_table().

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages11 packages

Patches

🔴Vulnerability Details

29
OSV
linux-raspi vulnerabilities2026-04-01
OSV
linux-ibm-5.4 vulnerabilities2026-03-27
OSV
linux-azure vulnerabilities2026-03-25
OSV
linux-azure-fips vulnerabilities2026-03-25
OSV
linux-iot, linux-kvm vulnerabilities2026-03-24

📋Vendor Advisories

31
Ubuntu
Kernel Live Patch Security Notice2026-04-13
Ubuntu
Linux kernel (Azure) vulnerabilities2026-04-13
Ubuntu
Linux kernel (Azure FIPS) vulnerabilities2026-04-09
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities2026-04-01
Ubuntu
Linux kernel (IBM) vulnerabilities2026-03-27
CVE-2025-21780 — Classic Buffer Overflow in Linux | cvebase