In the Linux kernel, the following vulnerability has been resolved:
Input: ims-pcu - check record size in imspcuflash_firmware()
The "len" variable comes from the firmware and we generally do trust firmware, but it's always better to double check. If the "len" is too large it could result in memory corruption when we do "memcpy(fragment->data, rec->data, len);"
[
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1250.0,
"function_hash": "31943437458450455755673458380222336726"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5a2481dc2a0b430f49276d7482793a8923631d6",
"target": {
"file": "drivers/input/misc/ims-pcu.c",
"function": "ims_pcu_flash_firmware"
},
"id": "CVE-2025-38428-0a037afd"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d63706d9f73846106fde28b284f08e01b92ce9f1",
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"id": "CVE-2025-38428-0ed1caab"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e03f1c7d50343bf21da54873301bc4fa647479f",
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"id": "CVE-2025-38428-11a7ecdb"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1250.0,
"function_hash": "31943437458450455755673458380222336726"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74661516daee1eadebede8dc607b6830530096ec",
"target": {
"file": "drivers/input/misc/ims-pcu.c",
"function": "ims_pcu_flash_firmware"
},
"id": "CVE-2025-38428-2598b715"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17474a56acf708bf6b2d174c06ed26abad0a9fd6",
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"id": "CVE-2025-38428-40301a89"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1250.0,
"function_hash": "31943437458450455755673458380222336726"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e03f1c7d50343bf21da54873301bc4fa647479f",
"target": {
"file": "drivers/input/misc/ims-pcu.c",
"function": "ims_pcu_flash_firmware"
},
"id": "CVE-2025-38428-62578657"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1250.0,
"function_hash": "31943437458450455755673458380222336726"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1b9d140b0807c6aee4bb53e1bfa4e391e3dc204",
"target": {
"file": "drivers/input/misc/ims-pcu.c",
"function": "ims_pcu_flash_firmware"
},
"id": "CVE-2025-38428-6a797a97"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1250.0,
"function_hash": "31943437458450455755673458380222336726"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17474a56acf708bf6b2d174c06ed26abad0a9fd6",
"target": {
"file": "drivers/input/misc/ims-pcu.c",
"function": "ims_pcu_flash_firmware"
},
"id": "CVE-2025-38428-9f58ff98"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74661516daee1eadebede8dc607b6830530096ec",
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"id": "CVE-2025-38428-bbf59430"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1250.0,
"function_hash": "31943437458450455755673458380222336726"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a95ef0199e80f3384eb992889322957d26c00102",
"target": {
"file": "drivers/input/misc/ims-pcu.c",
"function": "ims_pcu_flash_firmware"
},
"id": "CVE-2025-38428-bcd3ddba"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a95ef0199e80f3384eb992889322957d26c00102",
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"id": "CVE-2025-38428-bfd358f3"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5a2481dc2a0b430f49276d7482793a8923631d6",
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"id": "CVE-2025-38428-c2a5be3a"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1250.0,
"function_hash": "31943437458450455755673458380222336726"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d63706d9f73846106fde28b284f08e01b92ce9f1",
"target": {
"file": "drivers/input/misc/ims-pcu.c",
"function": "ims_pcu_flash_firmware"
},
"id": "CVE-2025-38428-d0c47543"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1b9d140b0807c6aee4bb53e1bfa4e391e3dc204",
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"id": "CVE-2025-38428-ecbf3cda"
}
]