cveboard RSS feed

CVE-2025-71197

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

w1: therm: Fix off-by-one buffer overflow in alarms_store

In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarms_store The sysfs buffer passed to alarms_store() is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byte. The original code then allocated 'size' bytes and used strcpy() to copy 'buf', which always writes one byte past the allocated buffer since strcpy() copies until the NUL terminator at index 'size'. Fix this by parsing the 'buf' parameter directly using simple_strtoll() without allocating any intermediate memory or string copying. This removes the overflow while simplifying the code.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
e2c94d6f572079511945e64537eb1218643f2e68affectedgit49ff9b4b9deacbefa6654a0a2bcaf910c9de7e95UnavailableNone listed
e2c94d6f572079511945e64537eb1218643f2e68affectedgit060b08d72a38b158a7f850d4b83c17c2969e0f6bUnavailableNone listed
e2c94d6f572079511945e64537eb1218643f2e68affectedgitb3fc3e1f04dcc7c41787bbf08a6e0d2728e022cfUnavailableNone listed
e2c94d6f572079511945e64537eb1218643f2e68affectedgit6a5820ecfa5a76c3d3e154802c8c15f391ef442eUnavailableNone listed
e2c94d6f572079511945e64537eb1218643f2e68affectedgit6fd6d2a8e41b7f544a4d26cbd60bedf9c67893a0UnavailableNone listed
e2c94d6f572079511945e64537eb1218643f2e68affectedgite6b2609af21b5cccc9559339591b8a2cbf884169UnavailableNone listed
e2c94d6f572079511945e64537eb1218643f2e68affectedgit761fcf46a1bd797bd32d23f3ea0141ffd437668aUnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
affected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
5.8affectedUnavailableUnavailableUnavailableNone listed
0unaffectedsemver5.8UnavailableNone listed
5.10.249unaffectedsemverUnavailable5.10.*None listed
5.15.199unaffectedsemverUnavailable5.15.*None listed
6.1.162unaffectedsemverUnavailable6.1.*None listed
6.6.122unaffectedsemverUnavailable6.6.*None listed
6.12.68unaffectedsemverUnavailable6.12.*None listed
6.18.8unaffectedsemverUnavailable6.18.*None listed
6.19unaffectedoriginal_commit_for_fixUnavailable*None listed