CVE-2025-37803

udmabuf: fix a buf size overflow issue during udmabuf creation

State: Published
Severity: 7.8 High
Published: May 8, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

udmabuf: fix a buf size overflow issue during udmabuf creation

by casting size_limit_mb to u64 when calculate pglimit.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
LinuxLinux	fbb0de795078190a9834b3409e4b009cfb18a6d4 to before e84a08fc7e25cdad5d9a3def42cc770ff711193fAffected fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 13fe12c037b470321436deec393030c6153cfeb9Affected fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 373512760e13fdaa726faa9502d0f5be2abb3d33Affected fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 3f6c9d66e0f8eb9679b57913aa64b4d2266f6fbeAffected fbb0de795078190a9834b3409e4b009cfb18a6d4 to before b2ff4e9c599b000833d16a917f519aa2e4a75de2Affected fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 29b65a3171a49c9b69f31035146be966cec40b7aAffected fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 2b8419c6ecf69007dcff54ea0b9f0b215282c55aAffected fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 021ba7f1babd029e714d13a6bf2571b08af96d0fAffected
LinuxLinux	4.20Affected before 4.20Not affected 5.4.293 through 5.4.Not affected 5.10.237 through 5.10.Not affected 5.15.181 through 5.15.Not affected 6.1.136 through 6.1.Not affected 6.6.89 through 6.6.Not affected 6.12.57 through 6.12.Not affected 6.14.5 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

fbb0de795078190a9834b3409e4b009cfb18a6d4 to before e84a08fc7e25cdad5d9a3def42cc770ff711193fAffected
fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 13fe12c037b470321436deec393030c6153cfeb9Affected
fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 373512760e13fdaa726faa9502d0f5be2abb3d33Affected
fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 3f6c9d66e0f8eb9679b57913aa64b4d2266f6fbeAffected
fbb0de795078190a9834b3409e4b009cfb18a6d4 to before b2ff4e9c599b000833d16a917f519aa2e4a75de2Affected
fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 29b65a3171a49c9b69f31035146be966cec40b7aAffected
fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 2b8419c6ecf69007dcff54ea0b9f0b215282c55aAffected
fbb0de795078190a9834b3409e4b009cfb18a6d4 to before 021ba7f1babd029e714d13a6bf2571b08af96d0fAffected

LinuxLinux

4.20Affected
before 4.20Not affected
5.4.293 through 5.4.*Not affected
5.10.237 through 5.10.*Not affected
5.15.181 through 5.15.*Not affected
6.1.136 through 6.1.*Not affected
6.6.89 through 6.6.*Not affected
6.12.57 through 6.12.*Not affected
6.14.5 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.