CVE-2025-38082
kernel: gpio: virtuser: fix potential out-of-bound write
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 18, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
gpio: virtuser: fix potential out-of-bound write
If the caller wrote more characters, count is truncated to the max available space in "simple_write_to_buffer". Check that the input size does not exceed the buffer size. Write a zero termination afterwards.
Statement
This vulnerability does not impact Red Hat Enterprise Linux or other Red Hat offerings because the affected GPIO virtual user driver is not present in supported kernels. The issue stems from insufficient bounds checking in driver interfaces introduced in newer upstream releases. As the vulnerable subsystem is not compiled into Red Hat enterprise kernels, there is no operational risk to Red Hat environments.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified