CVE-2025-37803 udmabuf: fix a buf size overflow issue during udmabuf creation

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Address Buffer Overflow and Integer Overflow Issues Two cybersecurity vulnerabilities were reported on February 18, 2026. CVE-2025-37803 addresses a buffer size overflow issue during udmabuf creation, while CVE-2024-58017 fixes a signed integer overflow related to LOG_BUF_LEN_MAX. Both vulnerabilities could impact systems utilizing these functionalities. 2 sources 45