CVE-2025-38088: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
In the Linux kernel, the following vulnerability has been resolved:
powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size should stay within the allocated region size.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38088?
The severity of CVE-2025-38088 is classified as a medium risk due to the potential for out of bounds memory access.
How do I fix CVE-2025-38088?
To fix CVE-2025-38088, you should apply the latest patches provided by the Linux kernel maintainers.
What systems are affected by CVE-2025-38088?
CVE-2025-38088 primarily affects versions of the Linux kernel that utilize the powerpc architecture.
What type of vulnerability is CVE-2025-38088?
CVE-2025-38088 is an out of bounds access vulnerability related to memory mapping in the Linux kernel.
Is CVE-2025-38088 being actively exploited?
There is currently no public information indicating that CVE-2025-38088 is being actively exploited in the wild.