CVE-2025-38484

In the Linux kernel, the following vulnerability has been resolved:

iio: backend: fix out-of-bound write

The buffer is set to 80 character. If a caller write more characters, count is truncated to the max available space in "simple_write_to_buffer". But afterwards a string terminator is written to the buffer at offset count without boundary check. The zero termination is written OUT-OF-BOUND.

Add a check that the given buffer is smaller then the buffer to prevent.

This vulnerability does not affect Red Hat Enterprise Linux or other Red Hat products because the affected Industrial I/O backend implementation is not present in supported kernel releases. The issue was introduced in upstream kernel releases that were not incorporated into Red Hat enterprise kernels. Consequently, systems running supported Red Hat kernels are not exposed to this flaw.