Wind River Support Network

HomeDefectsLIN1024-10126
Fixed

LIN1024-10126 : Security Advisory - linux - CVE-2025-38142

Created: Jul 4, 2025    Updated: Jul 14, 2025
Resolved Date: Jul 10, 2025
Found In Version: 10.24.33.1
Fix Version: 10.24.33.11
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]hwmon: (asus-ec-sensors) check sensor index in read_string()[EOL][EOL]Prevent a potential invalid memory access when the requested sensor[EOL]is not found.[EOL][EOL]find_ec_sensor_index() may return a negative value (e.g. -ENOENT),[EOL]but its result was used without checking, which could lead to[EOL]undefined behavior when passed to get_sensor_info().[EOL][EOL]Add a proper check to return -EINVAL if sensor_index is negative.[EOL][EOL]Found by Linux Verification Center (linuxtesting.org) with SVACE.[EOL][EOL][groeck: Return error code returned from find_ec_sensor_index]

CREATE(Triage):(User=lchen-cn) [CVE-2025-38142 (https://nvd.nist.gov/vuln/detail/CVE-2025-38142)

CVEs


Live chat
Online