CVE-2025-39680 — Out-of-bounds Read in Linux

CWE-125 — Out-of-bounds Read5 documents5 sources
Severity
7.1HIGHNVD
EPSS
0.0%
top 93.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedSep 5

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer The data->block[0] variable comes from user. Without proper check, the variable may be very large to cause an out-of-bounds bug. Fix this bug by checking the value of data->block[0] first. 1. commit 39244cc75482 ("i2c: ismt: Fix an out-of-bounds bug in ismt_access()") 2. commit 92fbb6d1296f ("i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()")

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages4 packages

▶NVDlinux/linux_kernel6.13 — 6.16.4+1
▶Debianlinux/linux_kernel< 6.16.5-1
▶CVEListV5linux/linuxc366be720235301fdadf67e6f1ea6ff32669c074 — 071e43fcba5ddd9a7813e6cc0aa10299eae41b21+2
▶debiandebian/linux< linux 6.16.5-1 (forky)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-qr79-p6wg-4p8q: In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer The data->block[0]↗2025-09-05
▶
OSV
CVE-2025-39680: In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer The data->block[0] v↗2025-09-05
▶

📋Vendor Advisories

2
Red Hat
kernel: i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer↗2025-09-05
▶
Debian
CVE-2025-39680: linux - In the Linux kernel, the following vulnerability has been resolved: i2c: rtl930...↗2025
▶
CVE-2025-39680 — Out-of-bounds Read in Linux | cvebase