CVE-2025-38428

HIGH

Linux Kernel - Out-of-bounds Write in IMS-PCU Firmware Flash Function

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - check record size in ims_pcu_flash_firmware() The "len" variable comes from the firmware and we generally do trust firmware, but it's always better to double check. If the "len" is too large it could result in memory corruption when we do "memcpy(fragment->data, rec->data, len);"

References (10)

Core 10
Core References

Scores

CVSS v3 7.8
EPSS 0.0008
EPSS Percentile 24.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (27)
debian/debian_linux 11.0
linux/Kernel 3.10.0 - 5.4.295linux
linux/Kernel 5.11.0 - 5.15.186linux
linux/Kernel 5.16.0 - 6.1.142linux
linux/Kernel 5.5.0 - 5.10.239linux
linux/Kernel 6.13.0 - 6.15.4linux
linux/Kernel 6.2.0 - 6.6.95linux
linux/Kernel 6.7.0 - 6.12.35linux
Linux/Linux < 3.10
Linux/Linux 3.10
... and 17 more
Published Jul 25, 2025
Tracked Since Feb 18, 2026