In the Linux kernel, the following vulnerability has been resolved:
software node: Correct a OOB check in softwarenodegetreferenceargs()
softwarenodegetreferenceargs() wants to get @index-th element, so the property value requires at least '(index + 1) * sizeof(*ref)' bytes but that can not be guaranteed by current OOB check, and may cause OOB for malformed property.
Fix by using as OOB check '((index + 1) * sizeof(*ref) > prop->length)'.
[
{
"deprecated": false,
"id": "CVE-2025-38342-18544d6b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7af18e42bdefe1dba5bcb32555a4d524fd504939",
"signature_version": "v1",
"target": {
"file": "drivers/base/swnode.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"212820361279727002290465396645973023939",
"289795133580792434928801964203179485498",
"278172205889493269614223504623287224816",
"51701151739133414110503750628774989894"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2025-38342-265a881e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@56ce76e8d406cc72b89aee7931df5cf3f18db49d",
"signature_version": "v1",
"target": {
"file": "drivers/base/swnode.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"212820361279727002290465396645973023939",
"289795133580792434928801964203179485498",
"278172205889493269614223504623287224816",
"51701151739133414110503750628774989894"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2025-38342-3e35e1a7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b3383110b6df48e0ba5936af2cb68d5eb6bd43b",
"signature_version": "v1",
"target": {
"function": "software_node_get_reference_args",
"file": "drivers/base/swnode.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "33016699645950801513516830297076049531",
"length": 1043.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38342-6b33bdf3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f9397cf7bfb680799fb8c7f717c8f756384c3280",
"signature_version": "v1",
"target": {
"function": "software_node_get_reference_args",
"file": "drivers/base/swnode.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "33016699645950801513516830297076049531",
"length": 1043.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38342-704858ed",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@56ce76e8d406cc72b89aee7931df5cf3f18db49d",
"signature_version": "v1",
"target": {
"function": "software_node_get_reference_args",
"file": "drivers/base/swnode.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "177364670662927673676499198700904816585",
"length": 1074.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38342-7512affb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b3383110b6df48e0ba5936af2cb68d5eb6bd43b",
"signature_version": "v1",
"target": {
"file": "drivers/base/swnode.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"212820361279727002290465396645973023939",
"289795133580792434928801964203179485498",
"278172205889493269614223504623287224816",
"51701151739133414110503750628774989894"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2025-38342-81d8c585",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9324127b07dde8529222dc19233aa57ec810856c",
"signature_version": "v1",
"target": {
"file": "drivers/base/swnode.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"212820361279727002290465396645973023939",
"289795133580792434928801964203179485498",
"278172205889493269614223504623287224816",
"51701151739133414110503750628774989894"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2025-38342-956909e3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@142acd739eb6f08c148a96ae8309256f1422ff4b",
"signature_version": "v1",
"target": {
"function": "software_node_get_reference_args",
"file": "drivers/base/swnode.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "177364670662927673676499198700904816585",
"length": 1074.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38342-9bebf9da",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7af18e42bdefe1dba5bcb32555a4d524fd504939",
"signature_version": "v1",
"target": {
"function": "software_node_get_reference_args",
"file": "drivers/base/swnode.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "33016699645950801513516830297076049531",
"length": 1043.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38342-e05f7575",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f9397cf7bfb680799fb8c7f717c8f756384c3280",
"signature_version": "v1",
"target": {
"file": "drivers/base/swnode.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"212820361279727002290465396645973023939",
"289795133580792434928801964203179485498",
"278172205889493269614223504623287224816",
"51701151739133414110503750628774989894"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2025-38342-e7b9e922",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9324127b07dde8529222dc19233aa57ec810856c",
"signature_version": "v1",
"target": {
"function": "software_node_get_reference_args",
"file": "drivers/base/swnode.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "33016699645950801513516830297076049531",
"length": 1043.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38342-f2767bb6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@142acd739eb6f08c148a96ae8309256f1422ff4b",
"signature_version": "v1",
"target": {
"file": "drivers/base/swnode.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"212820361279727002290465396645973023939",
"289795133580792434928801964203179485498",
"278172205889493269614223504623287224816",
"51701151739133414110503750628774989894"
],
"threshold": 0.9
}
}
]