CVE-2025-38111
BaseFortify
Publication date: 2025-07-03
Last updated on: 2025-12-16
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.6 (inc) to 5.10.239 (exc) |
| linux | linux_kernel | From 5.11 (inc) to 5.15.186 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 6.1.142 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.6.94 (exc) |
| linux | linux_kernel | From 6.7 (inc) to 6.12.34 (exc) |
| linux | linux_kernel | From 6.13 (inc) to 6.15.3 (exc) |
| linux | linux_kernel | 6.16 |
| debian | debian_linux | 11.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
This vulnerability can impact you by allowing out-of-bounds read or write operations in the kernel memory when using mdio-tools or similar interfaces. Such memory corruption could lead to system instability, crashes, or potentially allow an attacker to execute arbitrary code or escalate privileges on the affected system.
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel's net/mdiobus subsystem involves a lack of verification for parameters passed to the ioctl interface used by tools like 'mdio-tools' to read/write data to network interfaces and their PHY devices. Specifically, the ioctl accepts any mdio address without checking if it exceeds the maximum supported address (32). This can lead to out-of-bounds read/write access in the kernel's stats array, potentially causing memory corruption or other unintended behavior. The fix adds address verification before read/write operations to prevent this issue.
What immediate steps should I take to mitigate this vulnerability?
Update the Linux kernel to a version where the net/mdiobus vulnerability has been fixed, which includes address verification before read/write operations to prevent out-of-bounds access. Avoid using untrusted or modified versions of 'mdio-tools' that might exploit this issue until the kernel is patched.