CVE-2025-38429— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 10
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | bbdcba57a1a26a4439a4f4ecdbfaf80a10fd8f34< 44b9620e82bbec2b9a6ac77f63913636d84f96dc | affected |
bbdcba57a1a26a4439a4f4ecdbfaf80a10fd8f34< f704a80d9fa268e51a6cc5242714502c3c1fa605 | affected | ||
bbdcba57a1a26a4439a4f4ecdbfaf80a10fd8f34< 0007ef098dab48f1ba58364c40b4809f1e21b130 | affected | ||
bbdcba57a1a26a4439a4f4ecdbfaf80a10fd8f34< 6f18d174b73d0ceeaa341f46c0986436b3aefc9a | affected | ||
5.19 | affected | ||
< 5.19 | unaffected | ||
6.6.95≤ 6.6.* | unaffected | ||
6.12.35≤ 6.12.* | unaffected | ||
| … +2 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-38429の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
bus: mhi: ep: Update read pointer only after buffer is written
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhi_ep_ring_add_element, the read pointer (rd_offset) is updated before the buffer is written, potentially causing race conditions where the host sees an updated read pointer before the buffer is actually written. Updating rd_offset prematurely can lead to the host accessing an uninitialized or incomplete element, resulting in data corruption. Invoke the buffer write before updating rd_offset to ensure the element is fully written before signaling its availability.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于mhi ep总线模块过早更新读取指针，可能导致数据损坏。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2025-38429の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-38429のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Linux · 2025-07-25 · 114 CVEs total
| CVE-2025-38411 | 9.8 CRITICAL | netfs: Fix double put of request |
| CVE-2025-38430 | 9.8 CRITICAL | nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request |
| CVE-2025-38439 | 9.8 CRITICAL | bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT |
| CVE-2025-38365 | 9.1 CRITICAL | btrfs: fix a race between renames and directory logging |
| CVE-2025-38377 | 8.8 HIGH | rose: fix dangling neighbour pointers in rose_rt_device_down() |
| CVE-2025-38367 | 8.8 HIGH | LoongArch: KVM: Avoid overflow with array index |
| CVE-2025-38437 | 8.8 HIGH | ksmbd: fix potential use-after-free in oplock/lease break ack |
| CVE-2025-38375 | 8.4 HIGH | virtio-net: ensure the received length does not exceed allocated size |
| CVE-2025-38395 | 8.4 HIGH | regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods |
| CVE-2025-38422 | 7.8 HIGH | net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices |
| CVE-2025-38440 | 7.8 HIGH | net/mlx5e: Fix race between DIM disable and net_dim() |
| CVE-2025-38434 | 7.8 HIGH | Revert "riscv: Define TASK_SIZE_MAX for __access_ok()" |
| CVE-2025-38449 | 7.8 HIGH | drm/gem: Acquire references on GEM handles for framebuffers |
| CVE-2025-38382 | 7.8 HIGH | btrfs: fix iteration of extrefs during log replay |
| CVE-2025-38412 | 7.8 HIGH | platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks |
| CVE-2025-38447 | 7.8 HIGH | mm/rmap: fix potential out-of-bounds page table access during batched unmap |
| CVE-2025-38398 | 7.8 HIGH | spi: spi-qpic-snand: reallocate BAM transactions |
| CVE-2025-38408 | 7.8 HIGH | genirq/irq_sim: Initialize work context pointers properly |
| CVE-2025-38396 | 7.8 HIGH | fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass |
| CVE-2025-38386 | 7.8 HIGH | ACPICA: Refuse to evaluate a method if arguments are missing |
Showing 20 of 114 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev - CVE-2026-74575
thunderbolt: Prevent XDomain delayed work use-after-free on
同じベンダー: Linux
- CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev - CVE-2026-74575
thunderbolt: Prevent XDomain delayed work use-after-free on
V. CVE-2025-38429へのコメント
まだコメントはありません