Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38484

iio: backend: fix out-of-bound write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: iio: backend: fix out-of-bound write The buffer is set to 80 character. If a caller write more characters, count is truncated to the max available space in "simple_write_to_buffer". But afterwards a string terminator is written to the buffer at offset count without boundary check. The zero termination is written OUT-OF-BOUND. Add a check that the given buffer is smaller then the buffer to prevent.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • df3892e5e861c43d5612728ed259634675b8a71f to < 6eea9f7648ddb9e4903735a1f77cf196c957aa38affected
  • 035b4989211dc1c8626e186d655ae8ca5141bb73 to < 01e941aa7f5175125df4ac5d3aab099961525602affected
  • 035b4989211dc1c8626e186d655ae8ca5141bb73 to < da9374819eb3885636934c1006d450c3cb1a02edaffected
  • 04271a4d2740f98bbe36f82cd3d74677a839d1ebaffected
  • fd791c81f410ab1c554686a6f486dc7a176dfe35affected
  • 6.12.23 to < 6.12.40affected
  • 6.13.11 to < 6.14affected
  • 6.14.2 to < 6.15affected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.12.40 to ≤ 6.12.*unaffected
  • 6.15.8 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References