CVE-2025-39787

HIGH

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 9/11/2025Modified: 10/19/2026

Related Intelligence (1)

CRITICALData Breach

Siemens SIMATIC

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-134-10.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the late

CVE-2024-47704CVE-2024-57924
CISA Advisories

References (12)

https://git.kernel.org/stable/c/0d59ce2bfc3bb13abe6240335a1bf7b96536d022Patchhttps://git.kernel.org/stable/c/1096eb63ecfc8df90b70cd068e6de0c2ff204dfdPatchhttps://git.kernel.org/stable/c/43d26997d88c4056fce0324e72f62556bc7e8e8dPatchhttps://git.kernel.org/stable/c/81278be4eb5f08ba2c68c3055893e61cc03727fePatchhttps://git.kernel.org/stable/c/87bfabb3b2f46827639173f143aa43f7cfc0a7e6Patchhttps://git.kernel.org/stable/c/981c845f29838e468a9bfa87f784307193a31297Patchhttps://git.kernel.org/stable/c/9f9967fed9d066ed3dae9372b45ffa4f6fccfeefPatchhttps://git.kernel.org/stable/c/e1720eb32acf411c328af6a8c8f556c94535808ePatchhttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.htmlThird Party Advisoryhttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlThird Party Advisoryhttps://cert-portal.siemens.com/productcert/html/ssa-032379.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html