CVE-2025-38342software node: Correct a OOB check in software_node_get_reference_args()
- 7.0HighCVSS base score
- 0.20%Exploitation in 30 daysEPSS · top 90% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args() software_node_get_reference_args() wants to get @index-th element, so the property value requires at least '(index + 1) * sizeof(*ref)' bytes but that can not be guaranteed by current OOB check, and may cause OOB for malformed property. Fix by using as OOB check '((index + 1) * sizeof(*ref) > prop->length)'.
Timeline
ID reserved
By Linux
- 3 months later
· 3 months later
Published
- 15 months later
· 15 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.20% · top 90% of all CVEs (13 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.0.
Affected products
- affected 59abd83672f70cac4b6bf9b237506c5bc6837606 – < 142acd739eb6f08c148a96ae8309256f1422ff4b
- affected 59abd83672f70cac4b6bf9b237506c5bc6837606 – < 56ce76e8d406cc72b89aee7931df5cf3f18db49d
- affected 59abd83672f70cac4b6bf9b237506c5bc6837606 – < 9324127b07dde8529222dc19233aa57ec810856c
- affected 59abd83672f70cac4b6bf9b237506c5bc6837606 – < f9397cf7bfb680799fb8c7f717c8f756384c3280
- affected 59abd83672f70cac4b6bf9b237506c5bc6837606 – < 4b3383110b6df48e0ba5936af2cb68d5eb6bd43b
- affected 59abd83672f70cac4b6bf9b237506c5bc6837606 – < 7af18e42bdefe1dba5bcb32555a4d524fd504939
- affected 59abd83672f70cac4b6bf9b237506c5bc6837606 – < 31e4e12e0e9609850cefd4b2e1adf782f56337d6
- affected 5.0
- unaffected < 5.0
- unaffected 5.10.239 – ≤ 5.10.*
- unaffected 5.15.186 – ≤ 5.15.*
- unaffected 6.1.142 – ≤ 6.1.*
- unaffected 6.6.95 – ≤ 6.6.*
- unaffected 6.12.35 – ≤ 6.12.*
- unaffected 6.15.4 – ≤ 6.15.*
- unaffected 6.16 – ≤ *
References
References10
- https://git.kernel.org/stable/c/142acd739eb6f08c148a96ae8309256f1422ff4b (opens in a new tab)
- https://git.kernel.org/stable/c/56ce76e8d406cc72b89aee7931df5cf3f18db49d (opens in a new tab)
- https://git.kernel.org/stable/c/9324127b07dde8529222dc19233aa57ec810856c (opens in a new tab)
- https://git.kernel.org/stable/c/f9397cf7bfb680799fb8c7f717c8f756384c3280 (opens in a new tab)
- https://git.kernel.org/stable/c/4b3383110b6df48e0ba5936af2cb68d5eb6bd43b (opens in a new tab)
- https://git.kernel.org/stable/c/7af18e42bdefe1dba5bcb32555a4d524fd504939 (opens in a new tab)
- https://git.kernel.org/stable/c/31e4e12e0e9609850cefd4b2e1adf782f56337d6 (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html (opens in a new tab)
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-20904 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-38342)Record last updated .