Riskcovery

CVE-2025-38548

hwmon: (corsair-cpro) Validate the size of the received input buffer

State
Published
Severity
Not scored
Published
Aug 16, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (corsair-cpro) Validate the size of the received input buffer

Add buffer_recv_size to store the size of the received bytes. Validate buffer_recv_size in send_usb_cmd().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 40c3a445422579db8ad96c234dbe6c0ab3f6b936 to before 2e6f4d9cfbda52700c126c5a2b93dd2042e8680cAffected
  • 40c3a445422579db8ad96c234dbe6c0ab3f6b936 to before 4eb5cc48399f89b63acdbfe912fa5c8fe2900147Affected
  • 40c3a445422579db8ad96c234dbe6c0ab3f6b936 to before 0db770e2922389753ddbd6663a5516a32b97b743Affected
  • 40c3a445422579db8ad96c234dbe6c0ab3f6b936 to before eda5e38cc4dd2dcb422840540374910ef2818494Affected
  • 40c3a445422579db8ad96c234dbe6c0ab3f6b936 to before 3c4bdc8a852e446080adc8ceb90ddd67a56e1bb8Affected
  • 40c3a445422579db8ad96c234dbe6c0ab3f6b936 to before 2771d2ee3d95700f34e1e4df6a445c90565cd4e9Affected
  • 40c3a445422579db8ad96c234dbe6c0ab3f6b936 to before 495a4f0dce9c8c4478c242209748f1ee9e4d5820Affected
LinuxLinux
  • 5.9Affected
  • before 5.9Not affected
  • 5.10.241 through 5.10.*Not affected
  • 5.15.190 through 5.15.*Not affected
  • 6.1.147 through 6.1.*Not affected
  • 6.6.100 through 6.6.*Not affected
  • 6.12.40 through 6.12.*Not affected
  • 6.15.8 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.