CVE-2025-38159
BaseFortify
Publication date: 2025-07-03
Last updated on: 2025-12-18
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.4 (inc) to 5.15.186 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 6.1.142 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.6.94 (exc) |
| linux | linux_kernel | From 6.7 (inc) to 6.12.34 (exc) |
| linux | linux_kernel | From 6.13 (inc) to 6.15.3 (exc) |
| debian | debian_linux | 11.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel's wifi driver (rtw88) involves an incorrect buffer size for the 'para' array. The buffer size was originally set to 2, but the function 'rtw_fw_bt_wifi_control' reads 5 bytes from this array, which can lead to reading out of bounds memory. The fix was to increase the buffer size to 6 to prevent this out-of-bounds read.
How can this vulnerability impact me? :
The vulnerability can cause the system to read memory out of bounds, which may lead to undefined behavior such as crashes, data corruption, or potential security issues like information disclosure or privilege escalation, depending on how the out-of-bounds data is handled.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability was detected using the static analysis tool Svace. There are no specific commands provided to detect this vulnerability on your network or system.
What immediate steps should I take to mitigate this vulnerability?
The vulnerability is fixed by correcting the buffer size in the Linux kernel wifi driver rtw88 from 2 to 6 to avoid out-of-bounds reads. Immediate mitigation would involve updating the Linux kernel to a version that includes this fix.