CVE-2025-21780CWE-120

CVE-2025-21780

High · published February 27, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
17.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()

It malicious user provides a small pptable through sysfs and then

a bigger pptable, it may cause buffer overflow attack in function

smu_sys_set_pp_table().

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.2th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-02-27T08:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel< 6.1.1296.1.129
linux/linux_kernel≥ 6.2, < 6.6.796.6.79
linux/linux_kernel≥ 6.7, < 6.12.166.12.16
linux/linux_kernel≥ 6.13, < 6.13.46.13.4
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
https://git.kernel.org/stable/c/1abb2648698bf10783d2236a6b4a7ca5e8021699 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/231075c5a8ea54f34b7c4794687baa980814e6de · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2498d2db1d35e88a2060ea191ae75dce853dd084 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3484ea33157bc7334f57e64826ec5a4bf992151a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e43a8b9c4d700ffec819c5043a48769b3e7d9cab · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-019113.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-457936.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 27 FEB 02:18Z
    drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
    cvelistv5