CVE-2025-39680

The CVE-2025-39680 entry concerns the Linux kernel I2C RTL9300 driver. Vulnerable code path is rtl9300_i2c_smbus_xfer where data->block[0] is sourced from user input and could be very large, enabling an out-of-bounds access. The issue is remedied by validating data->block[0] before use. Aff...

CVE-2025-39680 i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer

In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: Fix out-of-bounds bug in rtl9300i2csmbusxfer The data-block0 variable comes from user. Without proper check, the variable may be very large to cause an out-of-bounds bug. Fix this bug by checking the value of...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the i2c/rtl9300 module not checking the data-block0 value, which could lead to out-of-bounds access...

PT-2025-36275

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an out-of-bounds bug in the rtl9300 i2c smbus xfer function. The data-block0 variable, sourced from user input, lacks proper validation, potentially leading t...