PT-2025-30830 · Nvidia+6 · Tegra Driver+6

Published 2025-01-01 · Updated 2026-04-20 · CVE-2025-38425

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the i2c subsystem, specifically in the tegra driver related to SMBUS block read operations. The vulnerability occurs when processing message lengths during SMBUS block reads. The system does not properly validate the message length received from the device, potentially allowing reads to proceed with invalid lengths (0 or exceeding the maximum allowed bytes).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2025-10954

CVE-2025-38425

DLA-4328-1

DSA-5973-1

ECHO-C4E3-EF41-F083

MGASA-2025-0218

MGASA-2025-0219

OPENSUSE-SU-2025:20081-1

RHSA-2025:11428

SUSE-SU-2025:02853-1

SUSE-SU-2025:02923-1

SUSE-SU-2025:02969-1

SUSE-SU-2025:02996-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025:03023-1

SUSE-SU-2025:20577-1

SUSE-SU-2025:20586-1

SUSE-SU-2025:20601-1

SUSE-SU-2025:20602-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02969-1

SUSE-SU-2025_02996-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

SUSE-SU-2025_03023-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

USN-7864-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

Tegra Driver

References · 3204

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38425.json · Exploit
• https://ubuntu.com/security/CVE-2025-38582 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39869 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37831 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39985 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7833-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40123 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40226 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39839 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38206 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40324 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0218 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39880 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40339 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39857 · Vendor Advisory