Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38667

iio: fix potential out-of-bound write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simple_write_to_buffer". To protect from OoB access, check that the input size fit into buffer and add a zero terminator after copy to the end of the copied data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6d5dd486c715908b5a6ed02315a15ff044a91025 to < 81a635b6eccd6fc889f6d07ab9583b705f739ce1affected
  • 6d5dd486c715908b5a6ed02315a15ff044a91025 to < 16285a0931869baa618b1f5d304e1e9d090470a8affected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.15.9 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References