Skip to main content
VulnerabilityPublished Updated

CVE-2025-71197: Linux kernel · w1: therm: Fix off-by-one buffer overflow in alarms_store

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in e6b2609af21b5cccc9559339591b8a2cbf884169 : patch Linux kernel soon.

Data as of 10 Nov 2026, 13:03 UTC

Severity
High

Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
Patch
Available – fixed in e6b2609af21b5cccc9559339591b8a2cbf884169, b3fc3e1f04dcc7c41787bbf08a6e0d2728e022cf, 761fcf46a1bd797bd32d23f3ea0141ffd437668a +4

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 4 Feb 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ e2c94d6f572079511945e64537eb1218643f2e68, < e6b2609af21b5cccc9559339591b8a2cbf884169
Fixed in
  • e6b2609af21b5cccc9559339591b8a2cbf884169
LinuxLinuxAffected
  • ≥ e2c94d6f572079511945e64537eb1218643f2e68, < b3fc3e1f04dcc7c41787bbf08a6e0d2728e022cf
Fixed in
  • b3fc3e1f04dcc7c41787bbf08a6e0d2728e022cf
LinuxLinuxAffected
  • ≥ e2c94d6f572079511945e64537eb1218643f2e68, < 761fcf46a1bd797bd32d23f3ea0141ffd437668a
Fixed in
  • 761fcf46a1bd797bd32d23f3ea0141ffd437668a
LinuxLinuxAffected
  • ≥ e2c94d6f572079511945e64537eb1218643f2e68, < 060b08d72a38b158a7f850d4b83c17c2969e0f6b
Fixed in
  • 060b08d72a38b158a7f850d4b83c17c2969e0f6b
LinuxLinuxAffected
  • ≥ e2c94d6f572079511945e64537eb1218643f2e68, < 49ff9b4b9deacbefa6654a0a2bcaf910c9de7e95
Fixed in
  • 49ff9b4b9deacbefa6654a0a2bcaf910c9de7e95
LinuxLinuxAffected
  • ≥ e2c94d6f572079511945e64537eb1218643f2e68, < 6fd6d2a8e41b7f544a4d26cbd60bedf9c67893a0
Fixed in
  • 6fd6d2a8e41b7f544a4d26cbd60bedf9c67893a0

AI-suggested

A fix is available and has been applied in the Linux kernel. Users and administrators should update to the fixed kernel versions that include the patch identified by the provided commit hashes. No additional mitigation steps are necessary once the system is updated.

Description

An off-by-one buffer overflow vulnerability was identified and fixed in the Linux kernel's w1 therm driver in the alarms_store function. The issue stemmed from improper handling of buffer size and string copying, which caused one byte to be written beyond the allocated buffer. The fix involves directly parsing the input buffer without intermediate copying, eliminating the overflow and simplifying the code.

References

Community reviews

Loading reviews…