CVE-2025-21780: linux kernel Buffer Overflow — Fix

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() It malicious user provides a small pptable through sysfs and then a bigger pptable, it may cause buffer overflow attack in function smu_sys_set_pp_table().

Is your site exposed to CVE-2025-21780?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-120 CWE-120

Affected Products

Vendor	Product	Versions
linux	linux_kernel	< 6.1.129
linux	linux_kernel	6.2 — 6.6.79
linux	linux_kernel	6.7 — 6.12.16
linux	linux_kernel	6.13 — 6.13.4
linux	linux_kernel	All
linux	linux_kernel	All

References

Advisories & Patches

https://git.kernel.org/stable/c/1abb2648698bf10783d2236a6b4a7ca5e8021699 https://git.kernel.org/stable/c/231075c5a8ea54f34b7c4794687baa980814e6de https://git.kernel.org/stable/c/2498d2db1d35e88a2060ea191ae75dce853dd084 https://git.kernel.org/stable/c/3484ea33157bc7334f57e64826ec5a4bf992151a https://git.kernel.org/stable/c/e43a8b9c4d700ffec819c5043a48769b3e7d9cab

Other References

https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html

Frequently Asked Questions

What is CVE-2025-21780? +

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() It malicious user provides a small pptable through sysfs and then a bigger pptable, it may cause buffer overflow attack in function smu_sys_set_pp_table(). It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2025-21780? +

CVE-2025-21780 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-21780? +

CVE-2025-21780 affects products from linux, specifically: linux_kernel. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-21780? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-27820

zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain …

CVE-2025-8412

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pack allows an …

CVE-2025-11698

A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious …

CVE-2025-12012

A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data …

CVE-2025-12011

A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, …

CVE-2024-13503

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM …

CVE-2025-21780