Threats Tagged 'cve-2025-71197'

An off-by-one buffer overflow vulnerability in the Linux kernel's w1 therm driver (alarms_store function) was identified and fixed. The issue arose because the sysfs buffer was allocated with 'size + 1' bytes to include a NUL terminator, but the 'size' argument did not account for this extra byte, leading to a buffer overflow when strcpy() copied the buffer. The fix involves parsing the input directly without intermediate copying, eliminating the overflow. This vulnerability affects multiple Linux kernel versions prior to specific patched releases and has been addressed in updated kernel packages. No known exploits are reported in the wild. Users should update to the fixed kernel versions and reboot to apply the changes.