CVE-2025-38088

powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

HIGH

7.1

CVSS Score

Published: June 30, 2025 at 07:29 AM UTC

Updated: June 17, 2026 at 09:16 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.1

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size should stay within the allocated region size.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

5.13 ≤ v < 5.15.1865.13 ≤ v < 6.1.1425.13 ≤ v < 6.12.345.13 ≤ v < 6.15.35.13 ≤ v < 6.165.13 ≤ v < 6.6.945.16 ≤ v < 6.1.1426.13 ≤ v < 6.15.36.2 ≤ v < 6.6.946.7 ≤ v < 6.12.345.13 6.16 rc18a22ad3dfafc7e33d4529015e14bb75179cacc

Vendor states this is fixed in 620b77b23c41a6546e5548ffe2ea3ad71880dde4 (fixed)

Vendor states this is fixed in 81260c41b518b6f32c701425f1427562fa92f293 (fixed)

Vendor states this is fixed in 8635e325b85dfb9ddebdfaa6b5605d40d16cd147 (fixed)

Vendor states this is fixed in 9c340b56d60545e4a159e41523dd8b23f81d3261 (fixed)

Vendor states this is fixed in bbd5a9ddb0f9750783a48a871c9e12c0b68c5f39 (fixed)

Vendor states this is fixed in cd097df4596f3a1e9d75eb8520162de1eb8485b2 (fixed)

Vendor states this is fixed in 5.13 (unaffected)

Vendor states this is fixed in 5.15.186 (unaffected)

Vendor states this is fixed in 6.1.142 (unaffected)

Vendor states this is fixed in 6.12.34 (unaffected)

Vendor states this is fixed in 6.15.3 (unaffected)

Vendor states this is fixed in 6.16 (unaffected)