Lucene search
+L

5 matches found

OSV
OSV
•added 2026/02/04 5:16 p.m.•7 views

AZL-77211 CVE-2025-71197 affecting package kernel for versions less than 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarmsstore The sysfs buffer passed to alarmsstore is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byt...

6.2AI score0.00208EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/02/04 4:07 p.m.•16 views

CVE-2025-71197

In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarmsstore The sysfs buffer passed to alarmsstore is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byt...

5.6AI score0.00208EPSS
SaveExploits0
CVE
CVE
•added 2026/02/04 4:07 p.m.•66 views

CVE-2025-71197

The CVE-2025-71197 issue affects the Linux kernel therm subsystem, where alarms_store() could overflow a sysfs buffer due to not accounting for the trailing NUL when allocating size. The root cause is a mis-sized buffer combined with a strcpy() copy, which writes past the end. Mitigation implemen...

5.6AI score0.00208EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/02/04 4:07 p.m.•12 views

EUVD-2025-206800

In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarmsstore The sysfs buffer passed to alarmsstore is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byt...

5.6AI score0.00208EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•0 views

CVE-2025-71197: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarmsstore The sysfs buffer passed to alarmsstore is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byt...

6.2AI score0.00208EPSS
SaveExploits0References1
Rows per page
Query Builder