CVE-2025-38667

In the Linux kernel, the following vulnerability has been resolved:

iio: fix potential out-of-bound write

The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simple_write_to_buffer". To protect from OoB access, check that the input size fit into buffer and add a zero terminator after copy to the end of the copied data.

This vulnerability does not impact supported Red Hat products because the affected code is not present. The flaw involves an out-of-bounds write in the Industrial I/O subsystem that was introduced in an upstream kernel release not included in Red Hat Enterprise Linux releases. Consequently, Red Hat systems are not exposed to this issue.