CVE-2025-71197 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux
13 documents7 sources
Severity
5.5MEDIUM
No vectorEPSS
0.1%
top 83.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 4
Latest updateApr 17
Description
In the Linux kernel, the following vulnerability has been resolved:
w1: therm: Fix off-by-one buffer overflow in alarms_store
The sysfs buffer passed to alarms_store() is allocated with 'size + 1'
bytes and a NUL terminator is appended. However, the 'size' argument
does not account for this extra byte. The original code then allocated
'size' bytes and used strcpy() to copy 'buf', which always writes one
byte past the allocated buffer since strcpy() copies until the NUL
terminator at index 'siz…
Affected Packages12 packages
▶CVEListV5linux/linuxe2c94d6f572079511945e64537eb1218643f2e68 — 49ff9b4b9deacbefa6654a0a2bcaf910c9de7e95+7
🔴Vulnerability Details
3OSV▶
CVE-2025-71197: In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarms_store The sysfs buffer passed↗2026-02-04
GHSA▶
GHSA-4c4g-c6q5-6cpq: In the Linux kernel, the following vulnerability has been resolved:
w1: therm: Fix off-by-one buffer overflow in alarms_store
The sysfs buffer passe↗2026-02-04