In the Linux kernel, the following vulnerability has been resolved:
iio: backend: fix out-of-bound write
The buffer is set to 80 character. If a caller write more characters, count is truncated to the max available space in "simple_write_to_buffer". But afterwards a string terminator is written to the buffer at offset count without boundary check. The zero termination is written OUT-OF-BOUND.
Add a check that the given buffer is smaller then the buffer to prevent.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-rtUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade dtb-apmUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-default-vdso | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-genericUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcpUpgrade linux-image-raspi-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-awsUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-azure-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-aws-64kUpgrade linux-image-virtualUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-aws-6.14 | Jul 31, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub