Skip to content
Sign in
7.0 High

CVE-2025-38342 In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in…

Description

In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args() software_node_get_reference_args() wants to get @index-th element, so the property value requires at least '(index + 1) * sizeof(*ref)' bytes but that can not be guaranteed by current OOB check, and may cause OOB for malformed property. Fix by using as OOB check '((index + 1) * sizeof(*ref) > prop->length)'.

Affected products and versions

Product Affected versions Fixed in
Linux 6.16 earliest → < 6.16 6.16
Linux 6.15 earliest → < 6.15.4 6.15.4
Linux 6.12 earliest → < 6.12.35 6.12.35
Linux 6.6 earliest → < 6.6.95 6.6.95
Linux 6.1 earliest → < 6.1.142 6.1.142
Linux 5.15 earliest → < 5.15.186 5.15.186
Linux 5.10 earliest → < 5.10.239 5.10.239
Linux 5.0 No fix stated
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated
Show the 2 other branches
Product Affected versions Fixed in
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated

Other CVEs of Linux

The 18286 CVEs of Linux →
CVE-2026-100082 xen-blkback: Avoid UAF when reading I/O statistics Not rated CVE-2026-100081 xen-netback: defer xenvif_mcast_addr_list_free() Not rated CVE-2026-100080 xen-netback: Fix UAF when reading statistics data Not rated CVE-2026-99270 tcp: Fix potential UAF in reqsk_timer_handler(). 8.1 High
Track this CVE