CVE-2025-38428

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - check record size in ims_pcu_flash_firmware() The "len" variable comes from the firmware and we generally do trust firmware, but it's always better to double check. If the "len" is too large it could result in memory corruption when we do "memcpy(fragment->data, rec->data, len);"

• CWE-787

• https://git.kernel.org/stable/c/17474a56acf708bf6b2d174c06ed26abad0a9fd6Patch
• https://git.kernel.org/stable/c/5a8cd6ae8393e2eaebf51d420d5374821ef2af87Patch
• https://git.kernel.org/stable/c/74661516daee1eadebede8dc607b6830530096ecPatch
• https://git.kernel.org/stable/c/8e03f1c7d50343bf21da54873301bc4fa647479fPatch
• https://git.kernel.org/stable/c/a95ef0199e80f3384eb992889322957d26c00102Patch
• https://git.kernel.org/stable/c/c1b9d140b0807c6aee4bb53e1bfa4e391e3dc204Patch
• https://git.kernel.org/stable/c/d63706d9f73846106fde28b284f08e01b92ce9f1Patch
• https://git.kernel.org/stable/c/e5a2481dc2a0b430f49276d7482793a8923631d6Patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlMailing List, Third Party Advisory

Published

Jul 25, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38422In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38423In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38424In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38425In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38426In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38427In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38429In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3843A vulnerability was found in panhainan DS-Java 1.0. It has b…6.5
• CVE-2025-38430In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38431In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38432In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38433In the Linux kernel, the following vulnerability has been re…5.5