PT-2025-33783 · Intel+6 · Intel Cherry Trail+7
Published
2025-07-28
·
Updated
2026-04-20
·
CVE-2025-38585
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A stack buffer overflow exists in the
gmin get var int() function when handling EFI variables larger than 64 bytes. The gmin get config var() function does not properly return error codes from efi.get variable(), leading to a misinterpretation of successful calls even when EFI BUFFER TOO SMALL is returned. This results in writing past the end of a 65-byte stack buffer in gmin get var int(). This issue affects camera sensor configuration on Intel Bay Trail and Cherry Trail platforms using the atomisp camera stack.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Stack Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Intel Bay Trail
Intel Cherry Trail
Linuxmint
Linux Kernel
Suse
Ubuntu