CVE-2025-38317CWE-787

CVE-2025-38317

High · published July 10, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Fix buffer overflow in debugfs

If the user tries to write more than 32 bytes then it results in memory

corruption. Fortunately, this is debugfs so it's limited to root users.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.9th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-07-10T12:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.11, < 6.12.346.12.34
linux/linux_kernel≥ 6.13, < 6.15.36.15.3
References (3)
https://git.kernel.org/stable/c/0c57aa8ef94cffc5c2d68230e19329a03e71a94f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8c4a200d03574bfcbf54fdb7ba5968b58ad2e0b3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8c7a5031a6b0d42e640fbd2d5d05f61f74e32dce · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 10 JUL 07:42Z
    wifi: ath12k: Fix buffer overflow in debugfs
    cvelistv5