CVE-2025-38090

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A heap overwrite issue has been identified in the Linux kernel, specifically in the drivers/rapidio/rio cm.c file. The problem arises from the riocm ch send() function not checking if sufficient data was sent by userspace, potentially allowing writes to fields outside the allocated space in the rio ch chan hdr. This issue is related to the riocm cdev ioctl(RIO CM CHAN SEND) and cm chan msg send() functions.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.