i2c: tegra: check msg length in SMBUS block read
Summary
| CVE | CVE-2025-38425 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2025-07-25 15:15:27 UTC |
| Updated | 2026-07-30 06:23:13 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read For SMBUS block read, do not continue to read if the message length passed from the device is '0' or greater than the maximum allowed bytes. |
Risk And Classification
Primary CVSS: v3.1 7.8 HIGH from [email protected]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Problem Types: NVD-CWE-noinfo
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Primary | 7.8 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | Secondary | 7.8 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | DECLARED | 7.8 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected d7583c8a57485da19feb6dd85573763a8c5ec1d1 c39d1a9ae4ad66afcecab124d7789722bfe909fa git | Not specified |
| CNA | Linux | Linux | affected d7583c8a57485da19feb6dd85573763a8c5ec1d1 be5f6a65509cd5675362f15eb0440fb28b0f9d64 git | Not specified |
| CNA | Linux | Linux | affected d7583c8a57485da19feb6dd85573763a8c5ec1d1 75a864f21ceeb8c1e8ce1b7589174fec2c3a039e git | Not specified |
| CNA | Linux | Linux | affected d7583c8a57485da19feb6dd85573763a8c5ec1d1 3f03f77ce688d02da284174e1884b6065d6159bd git | Not specified |
| CNA | Linux | Linux | affected d7583c8a57485da19feb6dd85573763a8c5ec1d1 a6e04f05ce0b070ab39d5775580e65c7d943da0b git | Not specified |
| CNA | Linux | Linux | affected 5.18 | Not specified |
| CNA | Linux | Linux | unaffected 5.18 semver | Not specified |
| CNA | Linux | Linux | unaffected 6.1.142 6.1.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.6.95 6.6.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.12.35 6.12.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.15.4 6.15.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.16 * original_commit_for_fix | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| lists.debian.org/debian-lts-announce/2025/10/msg00008.html | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | Mailing List, Third Party Advisory |
| git.kernel.org/stable/c/c39d1a9ae4ad66afcecab124d7789722bfe909fa | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/75a864f21ceeb8c1e8ce1b7589174fec2c3a039e | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/3f03f77ce688d02da284174e1884b6065d6159bd | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/be5f6a65509cd5675362f15eb0440fb28b0f9d64 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/a6e04f05ce0b070ab39d5775580e65c7d943da0b | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.