CVE-2025-38428: Input: ims-pcu - check record size in ims_pcu_flash_firmware()
In the Linux kernel, the following vulnerability has been resolved:
Input: ims-pcu - check record size in imspcuflashfirmware()
The "len" variable comes from the firmware and we generally do trust firmware, but it's always better to double check. If the "len" is too large it could result in memory corruption when we do "memcpy(fragment->data, rec->data, len);"
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38428?
CVE-2025-38428 is considered to have a medium severity rating due to potential vulnerabilities in the Linux kernel.
How do I fix CVE-2025-38428?
To fix CVE-2025-38428, update your Linux kernel to the latest patched version provided by your distribution.
What systems are affected by CVE-2025-38428?
CVE-2025-38428 affects various versions of the Linux kernel that utilize the ims-pcu component.
What is the impact of CVE-2025-38428?
The impact of CVE-2025-38428 may include potential denial of service or system instability due to improper handling of firmware record sizes.
When was CVE-2025-38428 discovered?
CVE-2025-38428 was publicly disclosed in 2025 as part of ongoing security assessments of the Linux kernel.