soc: qcom: mdt_loader: Ensure we don't read past the ELF header
CVE-2025-39787 is fixed in 44 products on 1 platform, first by DEBIAN-CVE-2025-39787, released September 11, 2025. It is not reported as exploited. Patch Radar priority: Routine.
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| bpftool · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| dtb-aarch64 · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| dtb-aarch64 · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-64kb · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-64kb · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-64kb · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-64kb · sles 15.7 | 6.4.0-150700.53.19.1 | SUSE-SU-2025:03601-1 | Oct 15, 2025 |
| kernel-64kb · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-azure · opensuse-leap 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-azure · sles 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-azure · sles 15.7 | 6.4.0-150700.20.15.2 | SUSE-SU-2025:03633-1 | Oct 17, 2025 |
| kernel-debug · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-default · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-default · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-default · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-default · sles 15.7 | 6.4.0-150700.53.19.1 | SUSE-SU-2025:03601-1 | Oct 15, 2025 |
| kernel-default · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-default-base · opensuse-leap 15.6 | 6.4.0-150600.23.73.1.150600.12.32.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-default-base · opensuse-leap 16.0 | 6.12.0-160000.6.1.160000.2.4 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-default-base · sles 15.6 | 6.4.0-150600.23.73.1.150600.12.32.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-default-base · sles 15.7 | 6.4.0-150700.53.19.1.150700.17.13.1 | SUSE-SU-2025:03601-1 | Oct 15, 2025 |
| kernel-default-base · sles 16.0 | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-docs · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-docs · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-docs · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-docs · sles 15.7 | 6.4.0-150700.53.19.1 | SUSE-SU-2025:03601-1 | Oct 15, 2025 |
| kernel-docs · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-kvmsmall · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-kvmsmall · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-kvmsmall · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-livepatch-SLE15-SP6-RT_Update_16 · sles 15.6 | 1-150600.1.3.1 | SUSE-SU-2025:3751-1 | Oct 23, 2025 |
| kernel-livepatch-SLE15-SP6_Update_16 · sles 15.6 | 1-150600.13.3.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-livepatch-SLE15-SP7-RT_Update_5 · sles 15.7 | 1-150700.1.3.1 | SUSE-SU-2025:3725-1 | Oct 22, 2025 |
| kernel-livepatch-SLE15-SP7_Update_5 · sles 15.7 | 1-150700.15.3.1 | SUSE-SU-2025:03601-1 | Oct 15, 2025 |
| kernel-obs-build · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-obs-build · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-obs-build · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-obs-build · sles 15.7 | 6.4.0-150700.53.19.1 | SUSE-SU-2025:03601-1 | Oct 15, 2025 |
| kernel-obs-qa · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-obs-qa · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-obs-qa · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-rt · opensuse-leap 15.6 | 6.4.0-150600.10.55.1 | SUSE-SU-2025:3751-1 | Oct 23, 2025 |
| kernel-rt · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-rt_debug · opensuse-leap 15.6 | 6.4.0-150600.10.55.1 | SUSE-SU-2025:3751-1 | Oct 23, 2025 |
| kernel-source · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-source · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-source · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-source · sles 15.7 | 6.4.0-150700.53.19.1 | SUSE-SU-2025:03601-1 | Oct 15, 2025 |
| kernel-source · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-source-azure · opensuse-leap 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-source-azure · sles 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-source-azure · sles 15.7 | 6.4.0-150700.20.15.2 | SUSE-SU-2025:03633-1 | Oct 17, 2025 |
| kernel-source-rt · opensuse-leap 15.6 | 6.4.0-150600.10.55.1 | SUSE-SU-2025:3751-1 | Oct 23, 2025 |
| kernel-syms · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-syms · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-syms · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-syms · sles 15.7 | 6.4.0-150700.53.19.1 | SUSE-SU-2025:03601-1 | Oct 15, 2025 |
| kernel-syms · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-syms-azure · opensuse-leap 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-syms-azure · sles 15.6 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 | Oct 17, 2025 |
| kernel-syms-azure · sles 15.7 | 6.4.0-150700.20.15.1 | SUSE-SU-2025:03633-1 | Oct 17, 2025 |
| kernel-syms-rt · opensuse-leap 15.6 | 6.4.0-150600.10.55.1 | SUSE-SU-2025:3751-1 | Oct 23, 2025 |
| kernel-uek · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek · ol 8 | 0:5.4.17-2136.348.3.el7uek | ELSA-2025-20663 | Oct 11, 2025 |
| kernel-uek · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-container · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-container · ol 8 | 0:5.4.17-2136.348.3.el7uek | ELSA-2025-20663 | Oct 11, 2025 |
| kernel-uek-container · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-container-debug · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-container-debug · ol 8 | 0:5.4.17-2136.348.3.el7uek | ELSA-2025-20663 | Oct 11, 2025 |
| kernel-uek-container-debug · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-core · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-core · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug · ol 8 | 0:5.4.17-2136.348.3.el7uek | ELSA-2025-20663 | Oct 11, 2025 |
| kernel-uek-debug · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-core · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-core · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-devel · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-devel · ol 8 | 0:5.4.17-2136.348.3.el7uek | ELSA-2025-20663 | Oct 11, 2025 |
| kernel-uek-debug-devel · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-modules · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-modules · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-modules-extra · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-debug-modules-extra · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-devel · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-devel · ol 8 | 0:5.4.17-2136.348.3.el7uek | ELSA-2025-20663 | Oct 11, 2025 |
| kernel-uek-devel · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-doc · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-doc · ol 8 | 0:5.4.17-2136.348.3.el7uek | ELSA-2025-20663 | Oct 11, 2025 |
| kernel-uek-doc · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-modules · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-modules · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-modules-extra · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-modules-extra · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek-tools · ol 8 | 0:5.4.17-2136.348.3.el7uek | ELSA-2025-20663 | Oct 11, 2025 |
| kernel-uek64k · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-core · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-core · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-devel · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-devel · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-modules · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-modules · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-modules-extra · ol 8 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-uek64k-modules-extra · ol 9 | 0:5.15.0-314.193.5.3.el9uek | ELSA-2025-25757 | Nov 10, 2025 |
| kernel-zfcpdump · opensuse-leap 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-zfcpdump · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-zfcpdump · sles 15.6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 | Oct 15, 2025 |
| kernel-zfcpdump · sles 15.7 | 6.4.0-150700.53.19.1 | SUSE-SU-2025:03601-1 | Oct 15, 2025 |
| kernel-zfcpdump · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| linux · Debian 12.15 (bookworm) | 6.1.153-1 | DEBIAN-CVE-2025-39787 | Sep 11, 2025 |
| linux · Debian 13.5 (trixie) | 6.12.48-1 | DEBIAN-CVE-2025-39787 | Sep 11, 2025 |
| linux · Debian 14 | 6.16.5-1 | DEBIAN-CVE-2025-39787 | Sep 11, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.