CVE-2025-38667
- Source
- https://cve.org/CVERecord?id=CVE-2025-38667
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38667.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-38667
- Downstream
- Published
- 2025-08-22T16:02:58.865Z
- Modified
- 2026-07-15T01:49:12.017771979Z
- Summary
- iio: fix potential out-of-bound write
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
iio: fix potential out-of-bound write
The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simplewriteto_buffer". To protect from OoB access, check that the input size fit into buffer and add a zero terminator after copy to the end of the copied data.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38667.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/16285a0931869baa618b1f5d304e1e9d090470a8
- https://git.kernel.org/stable/c/81a635b6eccd6fc889f6d07ab9583b705f739ce1
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38667.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-38667
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git