Buffer Size Vulnerability in Linux Kernel Affects Wi-Fi Functionality

CVE-2025-38159

What is CVE-2025-38159?

A vulnerability in the Linux kernel related to the handling of a 'para' buffer has been discovered. The issue arises from an insufficient buffer size specified for the 'para' array, which is passed to the function 'rtw_fw_bt_wifi_control'. The current implementation sets the buffer size to 2, allowing for the potential reading of out-of-bounds memory when accessing buffer indices. This can lead to unexpected behavior or security issues. Proper allocation of the buffer's size to accommodate the necessary data is essential for maintaining system integrity and security. The vulnerability was identified using the static analysis tool, Svace.

References