CVE-2025-38585

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A stack buffer overflow exists in the gmin get var int() function when handling EFI variables larger than 64 bytes. The gmin get config var() function does not properly return error codes from efi.get variable(), leading to a misinterpretation of successful calls even when EFI BUFFER TOO SMALL is returned. This results in writing past the end of a 65-byte stack buffer in gmin get var int(). This issue affects camera sensor configuration on Intel Bay Trail and Cherry Trail platforms using the atomisp camera stack.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.