Out-of-Bounds Write Vulnerability in Linux Kernel Affecting Multiple Versions

CVE-2025-38342

What is CVE-2025-38342?

An out-of-bounds write vulnerability has been identified in the Linux kernel. When the function software_node_get_reference_args() is called, it attempts to access the @index-th element of a property value. The existing bounds check does not guarantee that sufficient bytes are available, potentially leading to memory corruption when a malformed property is processed. To mitigate this issue, the bounds check has been adjusted to ensure that the required byte count does not exceed the property length. It is crucial for users and system administrators to apply available patches to safeguard against potential exploitation.

References