Out-of-Bounds Memory Read Vulnerability in Linux Kernel - CVE-2025-38329
Summary
CVE-2025-38329: In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info) KASAN reported out of bounds access - cs_dsp_mock_wmfw_add_info(), because the so... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its robustness, scalability, and extensive support for various hardware architectures. This vulnerability affects the Linux kernel versions in Debian 11, 12, and 13, highlighting its critical role in system security and stability.
Vulnerability Detail
CVE-2025-38329 is a vulnerability in the Linux kernel that allows for an out-of-bounds memory read access during a KUnit test for the cs_dsp firmware. The issue arises from the cs_dsp_mock_wmfw_add_info() function, where the source string length is incorrectly rounded up to the allocation size, leading to potential information leakage or system instability. This vulnerability could be exploited by attackers to read sensitive data from memory, posing a significant risk to system integrity.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workarounds have been mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available.
Conclusion
CVE-2025-38329 represents a significant vulnerability in the Linux kernel, affecting multiple Debian versions. Users are urged to update their systems promptly to mitigate the risks associated with this issue. Utilizing tools like Vulert can help in monitoring vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38329 is a vulnerability in the Linux kernel that allows for out-of-bounds memory read access, potentially leading to information leakage.
Debian versions 11, 12, and 13 are affected by this vulnerability in the Linux kernel.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
While there are no specific workarounds available, it is advisable to monitor the situation and apply the patch as soon as it is released.
Exploitation of this vulnerability could lead to unauthorized access to sensitive information and compromise system stability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
