CVE-2025-38342

software node: Correct a OOB check in software_node_get_reference_args()

State: Published
Severity: 7.0 High
Published: Jul 10, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

software node: Correct a OOB check in software_node_get_reference_args()

software_node_get_reference_args() wants to get @index-th element, so the property value requires at least '(index + 1) * sizeof(*ref)' bytes but that can not be guaranteed by current OOB check, and may cause OOB for malformed property.

Fix by using as OOB check '((index + 1) * sizeof(*ref) > prop->length)'.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	59abd83672f70cac4b6bf9b237506c5bc6837606 to before 142acd739eb6f08c148a96ae8309256f1422ff4bAffected 59abd83672f70cac4b6bf9b237506c5bc6837606 to before 56ce76e8d406cc72b89aee7931df5cf3f18db49dAffected 59abd83672f70cac4b6bf9b237506c5bc6837606 to before 9324127b07dde8529222dc19233aa57ec810856cAffected 59abd83672f70cac4b6bf9b237506c5bc6837606 to before f9397cf7bfb680799fb8c7f717c8f756384c3280Affected 59abd83672f70cac4b6bf9b237506c5bc6837606 to before 4b3383110b6df48e0ba5936af2cb68d5eb6bd43bAffected 59abd83672f70cac4b6bf9b237506c5bc6837606 to before 7af18e42bdefe1dba5bcb32555a4d524fd504939Affected 59abd83672f70cac4b6bf9b237506c5bc6837606 to before 31e4e12e0e9609850cefd4b2e1adf782f56337d6Affected
LinuxLinux	5.0Affected before 5.0Not affected 5.10.239 through 5.10.Not affected 5.15.186 through 5.15.Not affected 6.1.142 through 6.1.Not affected 6.6.95 through 6.6.Not affected 6.12.35 through 6.12.Not affected 6.15.4 through 6.15.Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

59abd83672f70cac4b6bf9b237506c5bc6837606 to before 142acd739eb6f08c148a96ae8309256f1422ff4bAffected
59abd83672f70cac4b6bf9b237506c5bc6837606 to before 56ce76e8d406cc72b89aee7931df5cf3f18db49dAffected
59abd83672f70cac4b6bf9b237506c5bc6837606 to before 9324127b07dde8529222dc19233aa57ec810856cAffected
59abd83672f70cac4b6bf9b237506c5bc6837606 to before f9397cf7bfb680799fb8c7f717c8f756384c3280Affected
59abd83672f70cac4b6bf9b237506c5bc6837606 to before 4b3383110b6df48e0ba5936af2cb68d5eb6bd43bAffected
59abd83672f70cac4b6bf9b237506c5bc6837606 to before 7af18e42bdefe1dba5bcb32555a4d524fd504939Affected
59abd83672f70cac4b6bf9b237506c5bc6837606 to before 31e4e12e0e9609850cefd4b2e1adf782f56337d6Affected

LinuxLinux

5.0Affected
before 5.0Not affected
5.10.239 through 5.10.*Not affected
5.15.186 through 5.15.*Not affected
6.1.142 through 6.1.*Not affected
6.6.95 through 6.6.*Not affected
6.12.35 through 6.12.*Not affected
6.15.4 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.