Lucene search
+L

5 matches found

OSV
OSV
•added 2026/02/04 5:16 p.m.•9 views

AZL-77211 CVE-2025-71197 affecting package kernel for versions less than 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarmsstore The sysfs buffer passed to alarmsstore is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byt...

6.6AI score0.00253EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/04 4:07 p.m.•72 views

CVE-2025-71197

The CVE-2025-71197 issue affects the Linux kernel therm subsystem, where alarms_store() could overflow a sysfs buffer due to not accounting for the trailing NUL when allocating size. The root cause is a mis-sized buffer combined with a strcpy() copy, which writes past the end. Mitigation implemen...

6.6AI score0.00253EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2026/02/04 4:07 p.m.•18 views

CVE-2025-71197

In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarmsstore The sysfs buffer passed to alarmsstore is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byt...

6.8AI score0.00253EPSS
SaveExploits0
EUVD
EUVD
•added 2026/02/04 4:07 p.m.•15 views

EUVD-2025-206800

In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarmsstore The sysfs buffer passed to alarmsstore is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byt...

6.6AI score0.00253EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•4 views

CVE-2025-71197: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarmsstore The sysfs buffer passed to alarmsstore is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byt...

6.6AI score0.00253EPSS
SaveExploits0References1
Rows per page
Query Builder