High severity7.8NVD Advisory· Published Jul 25, 2025· Updated Jul 30, 2026

CVE-2025-38422

Description

In the Linux kernel, the following vulnerability has been resolved:

net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices

Maximum OTP and EEPROM size for hearthstone PCI1xxxx devices are 8 Kb and 64 Kb respectively. Adjust max size definitions and return correct EEPROM length based on device. Also prevent out-of-bound read/write.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Debian/linux
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Linux/Kernel3 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.19,<6.1.142
- (no CPE)
- (no CPE)range: 4.19
osv-coords
pkg:linux/kernel
Range: >= 4.19.0, < 6.1.142

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/088279ff18cdc437d6fac5890e0c52c624f78a5bnvdPatch
git.kernel.org/stable/c/3b9935586a9b54d2da27901b830d3cf46ad66a1envdPatch
git.kernel.org/stable/c/51318d644c993b3f7a60b8616a6a5adc1e967cd2nvdPatch
git.kernel.org/stable/c/6b4201d74d0a49af2123abf2c9d142e59566714bnvdPatch
git.kernel.org/stable/c/9c41d2a2aa3817946eb613522200cab55513ddaanvdPatch
lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlnvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000