CVE-2025-39778
objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()
CVSS Score
7.1
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() The csts_state_names[] array only has six sparse entries, but the iteration code in nvmet_ctrl_state_show() iterates seven, resulting in a potential out-of-bounds stack read. Fix that. Fixes the following warning with an UBSAN kernel: vmlinux.o: warning: objtool: .text.nvmet_ctrl_state_show: unexpected end of section
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Apr 18, 2025 |
| Last Updated | May 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new high vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
649fd41420a816b11b07423ebf4dbd4ac1ac2905 < 1adc93a525fdee8e2b311e6d5fd93eb69714ca05 649fd41420a816b11b07423ebf4dbd4ac1ac2905 < 8fbf37a3577b4d64c150cafde338eee17b2f2ea4 649fd41420a816b11b07423ebf4dbd4ac1ac2905 < 0cc0efc58d6c741b2868d4af24874d7fec28a575 649fd41420a816b11b07423ebf4dbd4ac1ac2905 < 107a23185d990e3df6638d9a84c835f963fe30a6
Linux / Linux
6.11
References
git.kernel.org: https://git.kernel.org/stable/c/1adc93a525fdee8e2b311e6d5fd93eb69714ca05 git.kernel.org: https://git.kernel.org/stable/c/8fbf37a3577b4d64c150cafde338eee17b2f2ea4 git.kernel.org: https://git.kernel.org/stable/c/0cc0efc58d6c741b2868d4af24874d7fec28a575 git.kernel.org: https://git.kernel.org/stable/c/107a23185d990e3df6638d9a84c835f963fe30a6