CVE-2025-38386
BaseFortify
Publication date: 2025-07-25
Last updated on: 2025-12-16
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | to 5.4.296 (exc) |
| linux | linux_kernel | From 5.5 (inc) to 5.10.240 (exc) |
| linux | linux_kernel | From 5.11 (inc) to 5.15.187 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 6.1.144 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.6.97 (exc) |
| linux | linux_kernel | From 6.7 (inc) to 6.12.37 (exc) |
| linux | linux_kernel | From 6.13 (inc) to 6.15.6 (exc) |
| linux | linux_kernel | 6.16 |
| linux | linux_kernel | 6.16 |
| debian | debian_linux | 11.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-416 | The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer. |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
Update the Linux kernel to a version where ACPICA has been fixed to refuse to evaluate methods if the caller passes fewer arguments than expected. This prevents crashes caused by use-after-free due to missing method arguments in platform firmware. Since this is a firmware and kernel interpreter issue, applying the latest kernel patches or updates that address this ACPICA behavior is the recommended mitigation.
Can you explain this vulnerability to me?
This vulnerability occurs in the Linux kernel's ACPICA component, where a platform firmware update increased the number of method parameters but failed to update at least one caller accordingly. This caused ACPICA to crash due to a use-after-free error. The issue stems from an AML (ACPI Machine Language) problem where the interpreter cannot handle missing arguments. The fix makes ACPICA refuse to evaluate a method if fewer arguments than expected are passed.
How can this vulnerability impact me? :
The vulnerability can cause the ACPICA component in the Linux kernel to crash due to use-after-free errors when methods are called with missing arguments. This can lead to system instability or crashes, potentially affecting system reliability and availability.