CVE-2025-23157

In the Linux kernel, the following vulnerability has been resolved:

media: venus: hfi_parser: add check to avoid out of bound access

There is a possibility that init_codecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecs_count can get incremented to value more than MAX_CODEC_NUM, there can be OOB access. Reset the count so that it always starts from beginning.

This vulnerability does not affect Red Hat Enterprise Linux or other supported products because the Qualcomm Venus media driver is not enabled in Red Hat kernel builds. The issue resides in specialized hardware video acceleration support for Qualcomm platforms, which requires manipulating firmware payloads to cause out-of-bounds memory access. Consequently, standard enterprise kernel configurations do not compile or ship the affected driver code, leaving supported environments unexposed.