In the Linux kernel, the following vulnerability has been resolved:
iio: backend: fix out-of-bound write
The buffer is set to 80 character. If a caller write more characters, count is truncated to the max available space in "simple_write_to_buffer". But afterwards a string terminator is written to the buffer at offset count without boundary check. The zero termination is written OUT-OF-BOUND.
Add a check that the given buffer is smaller then the buffer to prevent.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade dtb-amazonUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-docs-html | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-aws-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-generic-6.14 | Jul 31, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub