CVE-2025-38548

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains an issue in the hwmon component, specifically within the corsair-cpro driver. The vulnerability involves insufficient validation of the size of received input buffers. A buffer recv size variable was added to store the size of received bytes, and validation is now performed in the send usb cmd() function.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.