CVE-2025-38667

iio: fix potential out-of-bound write

published August 22, 2025

CVSS
—
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: fix potential out-of-bound write

The buffer is set to 20 characters. If a caller write more characters,

count is truncated to the max available space in "simple_write_to_buffer".

To protect from OoB access, check that the input size fit into buffer and

add a zero terminator after copy to the end of the copied data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Published
2025-08-22T16:02Z
EPSS history
Timeline
  • 22 AUG 16:02Z
    iio: fix potential out-of-bound write
    cvelistv5