CVE-2025-38484

HIGH

Linux Kernel 6.12.23-6.12.39, 6.13.0-6.15.7 - Out-of-bounds Write in IIO Backend Buffer Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: iio: backend: fix out-of-bound write The buffer is set to 80 character. If a caller write more characters, count is truncated to the max available space in "simple_write_to_buffer". But afterwards a string terminator is written to the buffer at offset count without boundary check. The zero termination is written OUT-OF-BOUND. Add a check that the given buffer is smaller then the buffer to prevent.

Scores

CVSS v3 7.8
EPSS 0.0015
EPSS Percentile 4.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (17)
linux/Kernel < 6.12.40linux
linux/Kernel 6.13.0 - 6.15.8linux
Linux/Linux < 6.15
Linux/Linux 035b4989211dc1c8626e186d655ae8ca5141bb73 - 01e941aa7f5175125df4ac5d3aab099961525602
Linux/Linux 035b4989211dc1c8626e186d655ae8ca5141bb73 - da9374819eb3885636934c1006d450c3cb1a02ed
Linux/Linux 04271a4d2740f98bbe36f82cd3d74677a839d1eb
Linux/Linux 6.12.23 - 6.12.40
Linux/Linux 6.12.40 - 6.12.*
Linux/Linux 6.13.11 - 6.14
Linux/Linux 6.14.2 - 6.15
... and 7 more
Published Jul 28, 2025
Tracked Since Feb 18, 2026