Out-of-Bounds Read/Write Vulnerability in Linux Kernel - CVE-2025-38111
Summary
CVE-2025-38111: In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network inte... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It supports a wide range of functionalities, including networking, file systems, and device management. This vulnerability specifically affects the net/mdiobus component, which is responsible for managing the Media Independent Interface (MDI) for network devices. The vulnerability arises from inadequate parameter verification during read/write operations, potentially exposing systems to security risks.
Vulnerability Detail
The vulnerability identified as CVE-2025-38111 allows for potential out-of-bounds read/write access when using tools like 'mdio-tools' to interact with network interfaces and their PHYs via mdiobus. The ioctl function does not verify the parameters passed, allowing any mdio address to be accepted. Although the kernel supports a maximum of 32 addresses, higher values can be passed, leading to out-of-bounds operations on the stats array. This could result in unauthorized data access or system instability, posing significant security risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate the risks associated with this issue.
Conclusion
CVE-2025-38111 is a critical vulnerability in the Linux kernel that exposes systems to potential out-of-bounds read/write access. It is essential for users to update their kernels to the patched versions to enhance security and prevent unauthorized access. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38111 is a vulnerability in the Linux kernel that allows for potential out-of-bounds read/write access due to inadequate parameter verification in the net/mdiobus component.
This vulnerability can lead to unauthorized access to memory, potentially causing data corruption or system instability, which poses a significant security risk.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. By uploading a manifest file like package-lock.json, you can check if your application is affected by CVE-2025-38111.
While there are no specific workarounds available, it is crucial to prioritize updating your kernel to the patched version as soon as possible to mitigate the risks associated with this vulnerability.
Detailed information about CVE-2025-38111 can be found in the official CVE database and security advisories related to the Linux kernel.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
