PT-2025-29054 · Linux+10 · Linux Kernel+10
Anubis
·
Published
2025-07-10
·
Updated
2026-04-20
·
CVE-2025-38332
CVSS v2.0
7.7
High
| Vector | AV:A/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The
strlcat() function with FORTIFY support was triggering a panic due to a perceived buffer overflow, despite the correct target buffer size being passed. The issue occurs when using strlcat() with memset() followed by strlcat() for the BIOS version. The vulnerability is addressed by using memcpy() to ensure proper NULL termination of the resulting buffer, as the BIOSVersion is used by the lpfc printf log() function, which expects a properly terminated string.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu