CVE Database›Document archive›CVE-2025-38082

CVE-2025-38082

kernel: gpio: virtuser: fix potential out-of-bound write

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 18, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: virtuser: fix potential out-of-bound write

If the caller wrote more characters, count is truncated to the max available space in "simple_write_to_buffer". Check that the input size does not exceed the buffer size. Write a zero termination afterwards.

Statement

This vulnerability does not impact Red Hat Enterprise Linux or other Red Hat offerings because the affected GPIO virtual user driver is not present in supported kernels. The issue stems from insufficient bounds checking in driver interfaces introduced in newer upstream releases. As the vulnerable subsystem is not compiled into Red Hat enterprise kernels, there is no operational risk to Red Hat environments.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified