PT-2025-35952 · Linux+5 · Linux Kernel+5
Published
2025-05-19
·
Updated
2026-04-20
·
CVE-2025-38679
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The
event seq changed() handler in the Linux kernel does not validate the payload size against the message length, potentially leading to out-of-bounds memory access if the firmware provides a property count exceeding the available data. This condition can result in kernel crashes or information leaks. The issue is related to processing a variable number of properties sent by the firmware. The fix involves validating the remaining payload size before each property access and updating bounds accordingly during parsing to ensure safe operation within the received message buffer.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu