CVE-2025-38679

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The event seq changed() handler in the Linux kernel does not validate the payload size against the message length, potentially leading to out-of-bounds memory access if the firmware provides a property count exceeding the available data. This condition can result in kernel crashes or information leaks. The issue is related to processing a variable number of properties sent by the firmware. The fix involves validating the remaining payload size before each property access and updating bounds accordingly during parsing to ensure safe operation within the received message buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.