Tracker / CVE-2025-38342
CVE-2025-38342
High 7.0
In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args() software_node_get_reference_args() wants to get @index-th element, so the property value requires at least '(index + 1) * sizeof(*ref)' bytes but that can not be guaranteed by current OOB check, and may cause OOB for malformed property. Fix by using as OOB check '((index + 1) * sizeof(*ref) > prop->length)'.
Affected products and versions
| debian | debian_linux |
|---|---|
| linux | linux_kernel · 5.0 → 5.10.239 |
| linux | linux_kernel · 5.11 → 5.15.186 |
| linux | linux_kernel · 5.16 → 6.1.142 |
| linux | linux_kernel · 6.13 → 6.15.4 |
| linux | linux_kernel · 6.2 → 6.6.95 |
| linux | linux_kernel · 6.7 → 6.12.35 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.