https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 20:48:12 +0000 https://vulnerability.circl.lu/vuln/cve-2025-38428 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Input: ims-pcu - check record size in ims_pcu_flash_firmware()</p> <p>The &#34;len&#34; variable comes from the firmware and we generally do trust firmware, but it&#39;s always better to double check. If the &#34;len&#34; is too large it could result in memory corruption when we do &#34;memcpy(fragment-&gt;data, rec-&gt;data, len);&#34;</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Input: ims-pcu - check record size in ims_pcu_flash_firmware()</p> <p>The &#34;len&#34; variable comes from the firmware and we generally do trust firmware, but it&#39;s always better to double check. If the &#34;len&#34; is too large it could result in memory corruption when we do &#34;memcpy(fragment-&gt;data, rec-&gt;data, len);&#34;</p> https://vulnerability.circl.lu/vuln/cve-2025-38428