CVE - CVE-2025-38332

CVE-ID
CVE-2025-38332	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy() for BIOS version The strlcat() with FORTIFY support is triggering a panic because it thinks the target buffer will overflow although the correct target buffer size is passed in. Anyway, instead of memset() with 0 followed by a strlcat(), just use memcpy() and ensure that the resulting buffer is NULL terminated. BIOSVersion is only used for the lpfc_printf_log() which expects a properly terminated string.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/003baa7a1a152576d744bd655820449bbdb0248e URL:https://git.kernel.org/stable/c/003baa7a1a152576d744bd655820449bbdb0248e MISC:https://git.kernel.org/stable/c/2f63bf0d2b146956a2f2ff3b25cee71019e64561 URL:https://git.kernel.org/stable/c/2f63bf0d2b146956a2f2ff3b25cee71019e64561 MISC:https://git.kernel.org/stable/c/34c0a670556b24d36c9f8934227edb819ca5609e URL:https://git.kernel.org/stable/c/34c0a670556b24d36c9f8934227edb819ca5609e MISC:https://git.kernel.org/stable/c/75ea8375c5a83f46c47bfb3de6217c7589a8df93 URL:https://git.kernel.org/stable/c/75ea8375c5a83f46c47bfb3de6217c7589a8df93 MISC:https://git.kernel.org/stable/c/ac7bfaa099ec3e4d7dfd0ab9726fc3bc7911365d URL:https://git.kernel.org/stable/c/ac7bfaa099ec3e4d7dfd0ab9726fc3bc7911365d MISC:https://git.kernel.org/stable/c/ae82eaf4aeea060bb736c3e20c0568b67c701d7d URL:https://git.kernel.org/stable/c/ae82eaf4aeea060bb736c3e20c0568b67c701d7d MISC:https://git.kernel.org/stable/c/b699bda5db818b684ff62d140defd6394f38f3d6 URL:https://git.kernel.org/stable/c/b699bda5db818b684ff62d140defd6394f38f3d6 MISC:https://git.kernel.org/stable/c/d34f2384d6df11a6c67039b612c2437f46e587e8 URL:https://git.kernel.org/stable/c/d34f2384d6df11a6c67039b612c2437f46e587e8
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)