CVE-2025-39680

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-39680
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39680.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-39680
Downstream
Published
2025-09-05T17:20:46.456Z
Modified
2026-04-02T12:48:06.391678Z
Summary
i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer
Details

In the Linux kernel, the following vulnerability has been resolved:

i2c: rtl9300: Fix out-of-bounds bug in rtl9300i2csmbus_xfer

The data->block[0] variable comes from user. Without proper check, the variable may be very large to cause an out-of-bounds bug.

Fix this bug by checking the value of data->block[0] first.

  1. commit 39244cc75482 ("i2c: ismt: Fix an out-of-bounds bug in ismt_access()")
  2. commit 92fbb6d1296f ("i2c: xgene-slimpro: Fix out-of-bounds bug in xgeneslimproi2c_xfer()")
Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39680.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c366be720235301fdadf67e6f1ea6ff32669c074
Fixed
071e43fcba5ddd9a7813e6cc0aa10299eae41b21
Fixed
57f312b955938fc4663f430cb57a71f2414f601b

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39680.json"