7.8

CVE-2025-39787: soc: qcom: mdt_loader: Ensure we don't read past the ELF header

Modified
AliasesUBUNTU-CVE-2025-39787DEBIAN-CVE-2025-39787
Published 11-09-2025Last modified 15-10-2026

Vulnerability summary

CVE-2025-39787 is a high (CVSS 7.8) vulnerability in debian debian_linux. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 6.2% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.17%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 45 · Related 41
DLA-4327-1DLA-4328-1DSA-6008-1DSA-6009-1OPENSUSE-SU-2025:20081-1SUSE-SU-2025:03600-1

Timeline

  1. 11-09-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

6%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.17% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu147 products
  • linuxAll versions (No fix recorded) | < 5.15.0-163.173 | < 6.8.0-100.100
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1097.104 | < 6.8.0-1046.49
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.153-1 | < 6.12.48-1 | < 6.16.5-1
  • debian_linuxEOL11.0
Linux2 products
  • linux≥ 2aad40d911eeb7dcac91c669f2762a28134f0eb1, < 1096eb63ecfc8df90b70cd068e6de0c2ff204dfd | ≥ 2aad40d911eeb7dcac91c669f2762a28134f0eb1, < e1720eb32acf411c328af6a8c8f556c94535808e | ≥ 2aad40d911eeb7dcac91c669f2762a28134f0eb1, < 0d59ce2bfc3bb13abe6240335a1bf7b96536d022 | ≥ 2aad40d911eeb7dcac91c669f2762a28134f0eb1, < 43d26997d88c4056fce0324e72f62556bc7e8e8d | ≥ 2aad40d911eeb7dcac91c669f2762a28134f0eb1, < 981c845f29838e468a9bfa87f784307193a31297 | ≥ 2aad40d911eeb7dcac91c669f2762a28134f0eb1, < 87bfabb3b2f46827639173f143aa43f7cfc0a7e6 | ≥ 2aad40d911eeb7dcac91c669f2762a28134f0eb1, < 81278be4eb5f08ba2c68c3055893e61cc03727fe | ≥ 2aad40d911eeb7dcac91c669f2762a28134f0eb1, < 9f9967fed9d066ed3dae9372b45ffa4f6fccfeef | 4.11
  • linux_kernel≥ 4.11, < 5.4.297 | ≥ 5.5, < 5.10.241 | ≥ 5.11, < 5.15.190 | ≥ 5.16, < 6.1.149 | ≥ 6.2, < 6.6.103 | ≥ 6.7, < 6.12.44 | ≥ 6.13, < 6.16.4

3 vendors · 151 products

References

42 links
Show all 42 references