In the Linux kernel, the following vulnerability has been resolved:
iio: backend: fix out-of-bound write
The buffer is set to 80 character. If a caller write more characters, count is truncated to the max available space in "simplewriteto_buffer". But afterwards a string terminator is written to the buffer at offset count without boundary check. The zero termination is written OUT-OF-BOUND.
Add a check that the given buffer is smaller then the buffer to prevent.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01e941aa7f5175125df4ac5d3aab099961525602",
"target": {
"file": "drivers/iio/industrialio-backend.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-38484-021ad156",
"digest": {
"threshold": 0.9,
"line_hashes": [
"125226215038504652608414195141999655136",
"218097912995268583575814703572043342279",
"123831382886811816599499047999456981840",
"286093517912167349878715848545334788320",
"231091379068607230831260912676688008306",
"33643461924526258403105754382978785608",
"89742866910352583548289731483438684032"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01e941aa7f5175125df4ac5d3aab099961525602",
"target": {
"function": "iio_backend_debugfs_write_reg",
"file": "drivers/iio/industrialio-backend.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-38484-1a6e775c",
"digest": {
"length": 591.0,
"function_hash": "214059854888760332482562724983118116028"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6eea9f7648ddb9e4903735a1f77cf196c957aa38",
"target": {
"function": "iio_backend_debugfs_write_reg",
"file": "drivers/iio/industrialio-backend.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-38484-6eb5bf5e",
"digest": {
"length": 591.0,
"function_hash": "214059854888760332482562724983118116028"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6eea9f7648ddb9e4903735a1f77cf196c957aa38",
"target": {
"file": "drivers/iio/industrialio-backend.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-38484-73c83762",
"digest": {
"threshold": 0.9,
"line_hashes": [
"125226215038504652608414195141999655136",
"218097912995268583575814703572043342279",
"123831382886811816599499047999456981840",
"286093517912167349878715848545334788320",
"231091379068607230831260912676688008306",
"33643461924526258403105754382978785608",
"89742866910352583548289731483438684032"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da9374819eb3885636934c1006d450c3cb1a02ed",
"target": {
"function": "iio_backend_debugfs_write_reg",
"file": "drivers/iio/industrialio-backend.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-38484-c7ee00a1",
"digest": {
"length": 591.0,
"function_hash": "214059854888760332482562724983118116028"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da9374819eb3885636934c1006d450c3cb1a02ed",
"target": {
"file": "drivers/iio/industrialio-backend.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-38484-c8cc54cf",
"digest": {
"threshold": 0.9,
"line_hashes": [
"125226215038504652608414195141999655136",
"218097912995268583575814703572043342279",
"123831382886811816599499047999456981840",
"286093517912167349878715848545334788320",
"231091379068607230831260912676688008306",
"33643461924526258403105754382978785608",
"89742866910352583548289731483438684032"
]
},
"signature_type": "Line"
}
]