Buffer Overflow Vulnerability in Linux Kernel Affects Intersil p54 WiFi Devices

CVE-2025-38348

What is CVE-2025-38348?

A vulnerability exists in the Linux kernel's p54 driver, allowing a malicious USB device masquerading as an Intersil p54 WiFi interface to trigger a buffer overflow. This occurs when an attacker sends a crafted eeprom_readback message that exceeds the expected length, leading to potential crashes or system instability. Mitigation measures have been implemented that involve validating eeprom lengths before processing to prevent reliance on potentially tampered values, enhancing security against exploitation.

References