CVE-2025-38425
BaseFortify
Publication date: 2025-07-25
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel's i2c tegra driver involves improper handling of SMBUS block read messages. Specifically, the driver did not properly check the message length during SMBUS block reads, potentially allowing reads to continue when the message length was zero or exceeded the maximum allowed bytes. The issue has been resolved by adding checks to prevent reading in these cases.
How can this vulnerability impact me? :
If exploited, this vulnerability could lead to improper data reads from SMBUS devices, which might cause system instability or unexpected behavior in systems using the affected Linux kernel driver. However, specific impacts such as data corruption or security breaches are not detailed in the provided information.