Lucene search
+L

CVE-2025-38497

🗓️ 28 Jul 2025 11:22:05Reported by LinuxType 
cve
 cve
🔗 web.nvd.nist.gov👁 134 Views

Fixed out-of-bounds read in Linux kernel USB gadget with empty string input validation.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
astralinux
AstraLinux
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
15 Oct 202615:53
–astralinux
bdu_fstec
BDU FSTEC
Linux driver USB Configfs DoS
23 Sep 202500:00
–bdu_fstec
circl
Circl
CVE-2025-38497
30 Jul 202513:59
–circl
cnnvd
CNNVD
Linux Kernel Security Vulnerabilities
28 Jul 202500:00
–cnnvd
cvelist
Cvelist
CVE-2025-38497 usb: gadget: configfs: Fix OOB read on empty string write
28 Jul 202511:22
–cvelist
debian
Debian
[SECURITY] [DLA 4327-1] linux security update
13 Oct 202509:16
–debian
debian
Debian
[SECURITY] [DLA 4328-1] linux-6.1 security update
13 Oct 202509:16
–debian
debian
Debian
[SECURITY] [DSA 5973-1] linux security update
12 Aug 202519:07
–debian
debian
Debian
[SECURITY] [DSA 5975-1] linux security update
13 Aug 202510:59
–debian
debiancve
Debian CVE
CVE-2025-38497
28 Jul 202511:22
–debiancve
Rows per page
NVD
Vulners
CNA
Node
OR
linuxlinux_kernelRange3.16–5.4.297
linuxlinux_kernelRange5.5–5.10.241
linuxlinux_kernelRange5.11–5.15.190
linuxlinux_kernelRange5.16–6.1.147
linuxlinux_kernelRange6.2–6.6.100
linuxlinux_kernelRange6.7–6.12.40
linuxlinux_kernelRange6.13–6.15.8
linuxlinux_kernelMatch6.16rc1
linuxlinux_kernelMatch6.16rc2
linuxlinux_kernelMatch6.16rc3
linuxlinux_kernelMatch6.16rc4
linuxlinux_kernelMatch6.16rc5
linuxlinux_kernelMatch6.16rc6
Node
[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/gadget/configfs.c"
    ],
    "versions": [
      {
        "version": "87213d388e927aaa88b21d5ff7e1f75ca2288da1",
        "lessThan": "78b41148cfea2a3f04d87adf3a71b21735820a37",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "87213d388e927aaa88b21d5ff7e1f75ca2288da1",
        "lessThan": "d68b7c8fefbaeae8f065b84e40cf64baf4cc0c76",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "87213d388e927aaa88b21d5ff7e1f75ca2288da1",
        "lessThan": "15a87206879951712915c03c8952a73d6a74721e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "87213d388e927aaa88b21d5ff7e1f75ca2288da1",
        "lessThan": "2798111f8e504ac747cce911226135d50b8de468",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "87213d388e927aaa88b21d5ff7e1f75ca2288da1",
        "lessThan": "58bdd5160184645771553ea732da5c2887fc9bd1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "87213d388e927aaa88b21d5ff7e1f75ca2288da1",
        "lessThan": "783ea37b237a9b524f1e5ca018ea17d772ee0ea0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "87213d388e927aaa88b21d5ff7e1f75ca2288da1",
        "lessThan": "22b7897c289cc25d99c603f5144096142a30d897",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "87213d388e927aaa88b21d5ff7e1f75ca2288da1",
        "lessThan": "3014168731b7930300aab656085af784edc861f6",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/gadget/configfs.c"
    ],
    "versions": [
      {
        "version": "3.16",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.16",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.297",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.241",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.190",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.147",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.100",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.40",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.15.8",
        "lessThanOrEqual": "6.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.16",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 09:16Current
6.2Medium risk
Vulners AI Score6.2
CVSS 3.17.1
EPSS0.00186
134