NetSight
IP …
high7.0

CVE-2025-38342

In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args() software_node_get_…

Impact

In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args() software_node_get_reference_args() wants to get @index-th element, so the property value requires at least '(index + 1) * sizeof(*ref)' bytes but that can not be guaranteed by current OOB check, and may cause OOB for malformed property. Fix by using as OOB check '((index + 1) * sizeof(*ref) > prop->length)'.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.0 before 5.10.239
from 5.11 before 5.15.186
from 5.16 before 6.1.142
from 6.2 before 6.6.95
from 6.7 before 6.12.35
from 6.13 before 6.15.4
DebianDebian Linux
Version 11.0

Weakness classification

CWE-125

References