CVE-2025-39710

In the Linux kernel, the following vulnerability has been resolved:

media: venus: Add a check for packet size after reading from shared memory

Add a check to ensure that the packet size does not exceed the number of available words after reading the packet header from shared memory. This ensures that the size provided by the firmware is safe to process and prevent potential out-of-bounds memory access.

This vulnerability does not affect Red Hat Enterprise Linux as the Qualcomm Venus video hardware driver is not enabled or supported in Red Hat kernels. The flaw involves insufficient bounds validation when processing firmware message headers from shared memory buffers on systems equipped with Qualcomm media accelerators. Because the vulnerable driver code is not present in enterprise kernel packages, Red Hat deployments are not at risk.