CVE-2025-37803
udmabuf: fix a buf size overflow issue during udmabuf creation
HIGH
7.8
CVSS Score
Published: May 8, 2025 at 06:26 AM UTC
Updated: June 17, 2026 at 09:15 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.3%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb to u64 when calculate pglimit.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v < 5.4.2934.20 ≤ v < 5.10.2374.20 ≤ v < 5.15.1814.20 ≤ v < 5.4.2934.20 ≤ v < 6.1.1364.20 ≤ v < 6.12.574.20 ≤ v < 6.14.54.20 ≤ v < 6.154.20 ≤ v < 6.6.895.11 ≤ v < 5.15.1815.16 ≤ v < 6.1.1365.5 ≤ v < 5.10.2376.2 ≤ v < 6.6.896.7 ≤ v < 6.14.56.15 rc1fbb0de795078190a9834b3409e4b009cfb18a6d4
Vendor states this is fixed in 021ba7f1babd029e714d13a6bf2571b08af96d0f (fixed)
Vendor states this is fixed in 13fe12c037b470321436deec393030c6153cfeb9 (fixed)
Vendor states this is fixed in 29b65a3171a49c9b69f31035146be966cec40b7a (fixed)
Vendor states this is fixed in 2b8419c6ecf69007dcff54ea0b9f0b215282c55a (fixed)
Vendor states this is fixed in 373512760e13fdaa726faa9502d0f5be2abb3d33 (fixed)
Vendor states this is fixed in 3f6c9d66e0f8eb9679b57913aa64b4d2266f6fbe (fixed)
Vendor states this is fixed in b2ff4e9c599b000833d16a917f519aa2e4a75de2 (fixed)
Vendor states this is fixed in e84a08fc7e25cdad5d9a3def42cc770ff711193f (fixed)
Vendor states this is fixed in 4.20 (unaffected)
Vendor states this is fixed in 5.10.237 (unaffected)
Vendor states this is fixed in 5.15.181 (unaffected)
Vendor states this is fixed in 5.4.293 (unaffected)
Vendor states this is fixed in 6.1.136 (unaffected)
Vendor states this is fixed in 6.12.57 (unaffected)
Vendor states this is fixed in 6.14.5 (unaffected)
Vendor states this is fixed in 6.15 (unaffected)
Vendor states this is fixed in 6.6.89 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/021ba7f1babd029e714d13a6bf2571b08af96d0f
- https://git.kernel.org/stable/c/13fe12c037b470321436deec393030c6153cfeb9
- https://git.kernel.org/stable/c/2b8419c6ecf69007dcff54ea0b9f0b215282c55a
- https://git.kernel.org/stable/c/373512760e13fdaa726faa9502d0f5be2abb3d33
- https://git.kernel.org/stable/c/3f6c9d66e0f8eb9679b57913aa64b4d2266f6fbe
References (10)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/021ba7f1babd029e714d13a6bf2571b08af96d0fPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/13fe12c037b470321436deec393030c6153cfeb9Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2b8419c6ecf69007dcff54ea0b9f0b215282c55aPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/373512760e13fdaa726faa9502d0f5be2abb3d33Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3f6c9d66e0f8eb9679b57913aa64b4d2266f6fbePatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b2ff4e9c599b000833d16a917f519aa2e4a75de2Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e84a08fc7e25cdad5d9a3def42cc770ff711193fSSVC — Action Prioritization
SSVCNo known exploitNot automatableTotal impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
7.8HIGHCISA-ADP
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-120
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card