CVE-2025-38380

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The i2c dw xfer init() function requires msgs and msg write idx from the device context to be initialized. A flaw exists because amd i2c dw xfer quirk() initializes msgs and msgs num, but not msg write idx. This can lead to an out-of-bounds access of msgs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.