What’s Vulnerable › Vulnerabilities

CVE-2025-39778: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-18 · updated 2026-06-17
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() The csts_state_names[] array only has six sparse entries, but the iteration code in nvmet_ctrl_state_show() iterates seven, resulting in a potential out-of-bounds stack read. Fix that. Fixes the following warning with an UBSAN kernel: vmlinux.o: warning: objtool: .text.nvmet_ctrl_state_show: unexpected end of section

Affected products

• Linux kernel: from 6.11 before 6.12.23; from 6.13 before 6.13.11; from 6.14 before 6.14.2 — fixed in 6.12.23, 6.13.11, 6.14.2

How to fix

Upgrade to a fixed version: Linux kernel 6.12.23, 6.13.11, 6.14.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0cc0efc58d6c741b2868d4af24874d7fec28a575
• https://git.kernel.org/stable/c/107a23185d990e3df6638d9a84c835f963fe30a6
• https://git.kernel.org/stable/c/1adc93a525fdee8e2b311e6d5fd93eb69714ca05
• https://git.kernel.org/stable/c/8fbf37a3577b4d64c150cafde338eee17b2f2ea4

Get alerted when CVE-2025-39778 or the next vulnerability affects your stack