CVE-2025-38183
BaseFortify
Publication date: 2025-07-04
Last updated on: 2025-12-18
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.18 (inc) to 6.1.142 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.6.95 (exc) |
| linux | linux_kernel | From 6.7 (inc) to 6.12.35 (exc) |
| linux | linux_kernel | From 6.13 (inc) to 6.15.4 (exc) |
| linux | linux_kernel | 6.16 |
| linux | linux_kernel | 6.16 |
| debian | debian_linux | 11.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out-of-bounds write in the Linux kernel's lan743x network driver. The function lan743x_ptp_io_event_clock_get() writes to an array ptp->extts[] using a 'channel' index. Although the 'channel' value is checked against a maximum of 8, the array ptp->extts[] only has 4 elements allocated. This mismatch can cause writes beyond the allocated array bounds, potentially leading to memory corruption. The fix involves increasing the array size to 8 elements to match the maximum channel count.
How can this vulnerability impact me? :
The out-of-bounds write can lead to memory corruption within the kernel, which may cause system instability, crashes, or potentially allow an attacker to execute arbitrary code with kernel privileges. This can compromise the security and reliability of the affected system.
What immediate steps should I take to mitigate this vulnerability?
Update the Linux kernel to a version where the lan743x driver has been fixed to prevent out-of-bounds writes by setting LAN743X_PTP_N_EXTTS to 8, ensuring safe indexing in lan743x_ptp_io_event_clock_get().