CVE-2025-39778Out-of-bounds Read in Linux

CWE-125Out-of-bounds Read19 documents6 sources
Severity
7.1HIGHNVD
OSV5.9
EPSS
0.1%
top 79.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 18
Latest updateJul 8

Description

In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() The csts_state_names[] array only has six sparse entries, but the iteration code in nvmet_ctrl_state_show() iterates seven, resulting in a potential out-of-bounds stack read. Fix that. Fixes the following warning with an UBSAN kernel: vmlinux.o: warning: objtool: .text.nvmet_ctrl_state_show: unexpected end of section

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages5 packages

NVDlinux/linux_kernel6.116.12.23+2
Debianlinux/linux_kernel< 6.12.25-1+1
Ubuntulinux/linux_kernel< 6.14.0-22.22
CVEListV5linux/linux649fd41420a816b11b07423ebf4dbd4ac1ac29051adc93a525fdee8e2b311e6d5fd93eb69714ca05+4
debiandebian/linux< linux 6.12.25-1 (forky)

Patches

🔴Vulnerability Details

9
OSV
linux-azure, linux-azure-6.11 vulnerabilities2025-07-08
OSV
linux-aws, linux-oracle vulnerabilities2025-07-08
OSV
linux-lowlatency, linux-lowlatency-hwe-6.11 vulnerabilities2025-07-04
OSV
linux-oem-6.11 vulnerabilities2025-06-30
OSV
linux, linux-aws, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oracle, linux-raspi, linux-realtime vulnerabilities2025-06-30

📋Vendor Advisories

9
Ubuntu
Linux kernel (Azure) vulnerabilities2025-07-08
Ubuntu
Linux kernel vulnerabilities2025-07-08
Ubuntu
Linux kernel (Low Latency) vulnerabilities2025-07-04
Ubuntu
Linux kernel vulnerabilities2025-06-30
Ubuntu
Linux kernel (OEM) vulnerabilities2025-06-30
CVE-2025-39778 — Out-of-bounds Read in Linux | cvebase