Out-of-Bounds Relocation Access Vulnerability in Linux Kernel
Summary
DEBIAN-CVE-2025-37975: In the Linux kernel, the following vulnerability has been resolved: riscv: module: Fix out-of-bounds relocation access The current code allows rel[j] to access one element past the end of the relocation section. Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It is widely used in various distributions, including Debian. The kernel's modular architecture allows for dynamic loading of modules, enhancing flexibility and functionality. However, this architecture can also introduce vulnerabilities, such as the one identified in this report.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified that allows out-of-bounds access during relocation operations in the RISC-V architecture. Specifically, the code permits the access of an element beyond the end of the relocation section, which could lead to undefined behavior or system crashes. This issue arises from improper handling of the number of relocations, potentially compromising system stability and security.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been provided for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
The out-of-bounds relocation access vulnerability in the Linux kernel poses significant risks to system stability and security. Users are strongly advised to update to the patched version 6.12.25-1 to protect their systems. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
The vulnerability allows out-of-bounds access during relocation operations in the RISC-V architecture of the Linux kernel.
Exploiting this vulnerability could lead to system crashes or undefined behavior, impacting system stability and security.
You can use tools like Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected.
Yes, a patch is available in version 6.12.25-1 of the Linux package. Users should update to this version.
While no specific workarounds are available, it is crucial to prioritize updating the package to mitigate the risk associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
