CVE-2025-23159

In the Linux kernel, the following vulnerability has been resolved:

media: venus: hfi: add a check to handle OOB in sfr region

sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to allocated size for such cases.

This vulnerability does not impact Red Hat Enterprise Linux or other Red Hat products because support for the Qualcomm Venus video acceleration hardware driver is not enabled in supported kernels. The underlying flaw stems from insufficient validation of shared memory buffer parameters within the driver, which is only relevant on specialized Qualcomm hardware platforms. Standard Red Hat enterprise installations do not include or build this driver, leaving systems unexposed to exploitation.