High 7.8Published Feb 26, 2025

CVE-2025-21780drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()

Updated under an hour ago (Oct 26, 2026, 3:10 PM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() It malicious user provides a small pptable through sysfs and then a bigger pptable, it may cause buffer overflow attack in function smu_sys_set_pp_table().

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-120
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 137d63abbf6a0859e79b662e81d21170ecb75e59 before 3484ea33157bc7334f57e64826ec5a4bf992151a; from 137d63abbf6a0859e79b662e81d21170ecb75e59 before e43a8b9c4d700ffec819c5043a48769b3e7d9cab; from 137d63abbf6a0859e79b662e81d21170ecb75e59 before 2498d2db1d35e88a2060ea191ae75dce853dd084; from 137d63abbf6a0859e79b662e81d21170ecb75e59 before 231075c5a8ea54f34b7c4794687baa980814e6de; 137d63abbf6a0859e79b662e81d21170ecb75e59 builds before 1abb2648698bf10783d2236a6b4a7ca5e8021699	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	before 6.1.129; from 6.2 before 6.6.79; from 6.7 before 6.12.16; from 6.13 before 6.13.4; 6.14; 6.14	NVD

References

References

https://git.kernel.org/stable/c/3484ea33157bc7334f57e64826ec5a4bf992151a	mailing-list, patch
https://git.kernel.org/stable/c/e43a8b9c4d700ffec819c5043a48769b3e7d9cab	mailing-list, patch
https://git.kernel.org/stable/c/2498d2db1d35e88a2060ea191ae75dce853dd084	mailing-list, patch
https://git.kernel.org/stable/c/231075c5a8ea54f34b7c4794687baa980814e6de	mailing-list, patch
https://git.kernel.org/stable/c/1abb2648698bf10783d2236a6b4a7ca5e8021699	mailing-list, patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.