CVE-2025-38332

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The strlcat() function with FORTIFY support was triggering a panic due to a perceived buffer overflow, despite the correct target buffer size being passed. The issue occurs when using strlcat() with memset() followed by strlcat() for the BIOS version. The vulnerability is addressed by using memcpy() to ensure proper NULL termination of the resulting buffer, as the BIOSVersion is used by the lpfc printf log() function, which expects a properly terminated string.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.