Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38082

gpio: virtuser: fix potential out-of-bound write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix potential out-of-bound write If the caller wrote more characters, count is truncated to the max available space in "simple_write_to_buffer". Check that the input size does not exceed the buffer size. Write a zero termination afterwards.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 91581c4b3f29e2e22aeb1a62e842d529ca638b2d to < afe090366f470f77e140ff3407db813f57852c04affected
  • 91581c4b3f29e2e22aeb1a62e842d529ca638b2d to < b96feaaa0fda1e3871b438143c3446954b32d3a7affected
  • 91581c4b3f29e2e22aeb1a62e842d529ca638b2d to < 7118be7c6072f40391923543fdd1563b8d56377caffected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 6.12.32 to ≤ 6.12.*unaffected
  • 6.14.10 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References