CVE-2025-38367
HIGHLinux Kernel < 6.15.5 - Improper Array Index Validation
Title source: ruleDescription
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Avoid overflow with array index The variable index is modified and reused as array index when modify register EIOINTC_ENABLE. There will be array index overflow problem.
Scores
CVSS v3
7.8
EPSS
0.0003
EPSS Percentile
8.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-129
Status
published
Products (3)
linux/Kernel
6.13.0 - 6.15.5linux
linux/linux_kernel
6.16 rc1 (3 CPE variants)
linux/linux_kernel
6.13 - 6.15.5
Published
Jul 25, 2025
Tracked Since
Feb 18, 2026