[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-38224":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-30T21:17:53.703Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":25,"downstream":26,"duplicates":57,"related":58,"reserved_at":9,"published_at":66,"modified_at":67,"state":68,"summary":69,"references_raw":78,"kevs":93,"epss":94,"epss_history":97,"metrics":366,"affected":372},"CVE-2025-38224","In the Linux kernel, the following vulnerability has been resolved:\n\ncan: kvaser_pciefd: refine error prone echo_skb_max handling logic\n\necho_skb_max should define the supported upper limit of echo_skb[]\nallocated inside the netdevice's priv. The corresponding size value\nprovided by this driver to alloc_candev() is KVASER_PCIEFD_CAN_TX_MAX_COUNT\nwhich is 17.\n\nBut later echo_skb_max is rounded up to the nearest power of two (for the\nmax case, that would be 32) and the tx/ack indices calculated further\nduring tx/rx may exceed the upper array boundary. Kasan reported this for\nthe ack case inside kvaser_pciefd_handle_ack_packet(), though the xmit\nfunction has actually caught the same thing earlier.\n\n BUG: KASAN: slab-out-of-bounds in kvaser_pciefd_handle_ack_packet+0x2d7/0x92a drivers/net/can/kvaser_pciefd.c:1528\n Read of size 8 at addr ffff888105e4f078 by task swapper/4/0\n\n CPU: 4 UID: 0 PID: 0 Comm: swapper/4 Not tainted 6.15.0 #12 PREEMPT(voluntary)\n Call Trace:\n  \u003CIRQ>\n dump_stack_lvl lib/dump_stack.c:122\n print_report mm/kasan/report.c:521\n kasan_report mm/kasan/report.c:634\n kvaser_pciefd_handle_ack_packet drivers/net/can/kvaser_pciefd.c:1528\n kvaser_pciefd_read_packet drivers/net/can/kvaser_pciefd.c:1605\n kvaser_pciefd_read_buffer drivers/net/can/kvaser_pciefd.c:1656\n kvaser_pciefd_receive_irq drivers/net/can/kvaser_pciefd.c:1684\n kvaser_pciefd_irq_handler drivers/net/can/kvaser_pciefd.c:1733\n __handle_irq_event_percpu kernel/irq/handle.c:158\n handle_irq_event kernel/irq/handle.c:210\n handle_edge_irq kernel/irq/chip.c:833\n __common_interrupt arch/x86/kernel/irq.c:296\n common_interrupt arch/x86/kernel/irq.c:286\n  \u003C/IRQ>\n\nTx max count definitely matters for kvaser_pciefd_tx_avail(), but for seq\nnumbers' generation that's not the case - we're free to calculate them as\nwould be more convenient, not taking tx max count into account. The only\ndownside is that the size of echo_skb[] should correspond to the max seq\nnumber (not tx max count), so in some situations a bit more memory would\nbe consumed than could be.\n\nThus make the size of the underlying echo_skb[] sufficient for the rounded\nmax tx value.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[],[],[],[27,29,31,33,35,37,39,41,43,45,47,49,51,53,55],{"_key":28},"UBUNTU-CVE-2025-38224",{"_key":30},"SUSE-SU-2026:0928-1",{"_key":32},"SUSE-SU-2025:21074-1",{"_key":34},"SUSE-SU-2025:21139-1",{"_key":36},"SUSE-SU-2025:21179-1",{"_key":38},"OPENSUSE-SU-2025:20081-1",{"_key":40},"SUSE-SU-2026:0961-1",{"_key":42},"USN-7856-1",{"_key":44},"DEBIAN-CVE-2025-38224",{"_key":46},"SUSE-SU-2026:20560-1",{"_key":48},"USN-7833-1",{"_key":50},"USN-7833-2",{"_key":52},"USN-7833-3",{"_key":54},"USN-7833-4",{"_key":56},"USN-7834-1",[],[59,60,61,62,63,64,65],{"_key":30},{"_key":32},{"_key":34},{"_key":36},{"_key":38},{"_key":40},{"_key":46},"2025-07-04T13:37:39.305Z","2026-05-23T15:59:13.673Z","Analyzed",{"cisa_kev":70,"cisa_ransomware":70,"cisa_vendor":9,"epss_severity":71,"epss_score":72,"severity":73,"severity_score":74,"severity_version":75,"severity_source":76,"severity_vector":77,"severity_status":68},false,"low",0.0014,"high",7.1,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",[79,85,89],{"url":80,"sources":81,"tags":83},"https://git.kernel.org/stable/c/d8a054b6e6824a8b52c3977ebd38c9583a63efac",[82,76],"cve.org",[84],"Patch",{"url":86,"sources":87,"tags":88},"https://git.kernel.org/stable/c/a6550c9aa11e2f57f9cdaa6249cdd44d446be874",[82,76],[84],{"url":90,"sources":91,"tags":92},"https://git.kernel.org/stable/c/54ec8b08216f3be2cc98b33633d3c8ea79749895",[82,76],[84],[],{"date":95,"score":72,"percentile":96},"2026-07-05",0.03675,[98,102,105,108,111,113,116,119,122,125,128,131,134,137,140,143,147,150,153,156,159,162,165,168,171,174,177,181,185,189,191,194,197,200,202,205,208,211,214,218,221,224,227,231,233,236,239,242,245,248,251,254,257,260,263,265,268,271,273,276,278,280,283,286,288,291,294,297,300,303,306,309,311,314,317,320,323,326,329,332,335,338,341,344,347,350,354,357,360,363],{"date":99,"score":100,"percentile":101},"2025-11-04",0.00032,0.08272,{"date":103,"score":100,"percentile":104},"2025-11-05",0.08283,{"date":106,"score":100,"percentile":107},"2025-11-06",0.08401,{"date":109,"score":100,"percentile":110},"2025-11-07",0.0842,{"date":112,"score":100,"percentile":110},"2025-11-08",{"date":114,"score":100,"percentile":115},"2025-11-09",0.08388,{"date":117,"score":100,"percentile":118},"2025-11-10",0.08347,{"date":120,"score":100,"percentile":121},"2025-11-11",0.08373,{"date":123,"score":100,"percentile":124},"2025-11-12",0.08408,{"date":126,"score":100,"percentile":127},"2025-11-13",0.08452,{"date":129,"score":100,"percentile":130},"2025-11-14",0.08501,{"date":132,"score":100,"percentile":133},"2025-11-15",0.08528,{"date":135,"score":100,"percentile":136},"2025-11-16",0.0854,{"date":138,"score":100,"percentile":139},"2025-11-17",0.08538,{"date":141,"score":100,"percentile":142},"2025-11-18",0.05018,{"date":144,"score":145,"percentile":146},"2025-11-19",0.00022,0.02955,{"date":148,"score":145,"percentile":149},"2025-11-20",0.03012,{"date":151,"score":145,"percentile":152},"2025-11-21",0.04908,{"date":154,"score":145,"percentile":155},"2025-11-22",0.04919,{"date":157,"score":145,"percentile":158},"2025-11-23",0.04911,{"date":160,"score":145,"percentile":161},"2025-11-24",0.04896,{"date":163,"score":145,"percentile":164},"2025-11-25",0.04907,{"date":166,"score":145,"percentile":167},"2025-11-26",0.04944,{"date":169,"score":145,"percentile":170},"2025-11-27",0.04963,{"date":172,"score":145,"percentile":173},"2025-11-28",0.04949,{"date":175,"score":145,"percentile":176},"2025-11-29",0.05001,{"date":178,"score":179,"percentile":180},"2025-11-30",0.00011,0.00945,{"date":182,"score":183,"percentile":184},"2025-12-01",0.0001,0.00859,{"date":186,"score":187,"percentile":188},"2025-12-02",0.00013,0.01415,{"date":190,"score":187,"percentile":188},"2025-12-03",{"date":192,"score":187,"percentile":193},"2025-12-04",0.01394,{"date":195,"score":187,"percentile":196},"2025-12-05",0.01405,{"date":198,"score":187,"percentile":199},"2025-12-06",0.01409,{"date":201,"score":187,"percentile":196},"2025-12-07",{"date":203,"score":187,"percentile":204},"2025-12-08",0.01406,{"date":206,"score":187,"percentile":207},"2025-12-09",0.01421,{"date":209,"score":187,"percentile":210},"2025-12-10",0.01432,{"date":212,"score":187,"percentile":213},"2025-12-11",0.01427,{"date":215,"score":216,"percentile":217},"2025-12-12",0.00015,0.02235,{"date":219,"score":216,"percentile":220},"2025-12-13",0.02217,{"date":222,"score":216,"percentile":223},"2025-12-14",0.02223,{"date":225,"score":216,"percentile":226},"2025-12-15",0.0221,{"date":228,"score":229,"percentile":230},"2025-12-16",0.00012,0.01322,{"date":232,"score":229,"percentile":230},"2025-12-17",{"date":234,"score":229,"percentile":235},"2025-12-18",0.01312,{"date":237,"score":229,"percentile":238},"2025-12-19",0.01317,{"date":240,"score":229,"percentile":241},"2025-12-20",0.01316,{"date":243,"score":229,"percentile":244},"2025-12-21",0.01327,{"date":246,"score":229,"percentile":247},"2025-12-22",0.01329,{"date":249,"score":229,"percentile":250},"2025-12-23",0.01328,{"date":252,"score":229,"percentile":253},"2025-12-24",0.01331,{"date":255,"score":229,"percentile":256},"2025-12-25",0.01333,{"date":258,"score":229,"percentile":259},"2025-12-26",0.01336,{"date":261,"score":229,"percentile":262},"2025-12-27",0.0133,{"date":264,"score":229,"percentile":262},"2025-12-28",{"date":266,"score":229,"percentile":267},"2025-12-29",0.01319,{"date":269,"score":229,"percentile":270},"2025-12-30",0.01315,{"date":272,"score":229,"percentile":235},"2025-12-31",{"date":274,"score":229,"percentile":275},"2026-01-01",0.01335,{"date":277,"score":229,"percentile":253},"2026-01-02",{"date":279,"score":229,"percentile":256},"2026-01-03",{"date":281,"score":229,"percentile":282},"2026-01-04",0.01302,{"date":284,"score":229,"percentile":285},"2026-01-05",0.01308,{"date":287,"score":229,"percentile":282},"2026-01-06",{"date":289,"score":229,"percentile":290},"2026-01-07",0.01307,{"date":292,"score":229,"percentile":293},"2026-01-08",0.01321,{"date":295,"score":229,"percentile":296},"2026-01-09",0.01338,{"date":298,"score":229,"percentile":299},"2026-01-10",0.01346,{"date":301,"score":229,"percentile":302},"2026-01-11",0.01344,{"date":304,"score":229,"percentile":305},"2026-01-12",0.01347,{"date":307,"score":229,"percentile":308},"2026-01-13",0.01345,{"date":310,"score":229,"percentile":305},"2026-01-14",{"date":312,"score":229,"percentile":313},"2026-01-15",0.01359,{"date":315,"score":229,"percentile":316},"2026-01-16",0.01367,{"date":318,"score":229,"percentile":319},"2026-01-17",0.0137,{"date":321,"score":229,"percentile":322},"2026-01-18",0.01383,{"date":324,"score":229,"percentile":325},"2026-01-19",0.01374,{"date":327,"score":229,"percentile":328},"2026-01-20",0.0136,{"date":330,"score":229,"percentile":331},"2026-01-21",0.01355,{"date":333,"score":229,"percentile":334},"2026-01-22",0.01358,{"date":336,"score":229,"percentile":337},"2026-01-23",0.01372,{"date":339,"score":229,"percentile":340},"2026-01-24",0.01377,{"date":342,"score":229,"percentile":343},"2026-01-25",0.01376,{"date":345,"score":229,"percentile":346},"2026-01-26",0.01373,{"date":348,"score":229,"percentile":349},"2026-01-27",0.01361,{"date":351,"score":352,"percentile":353},"2026-01-28",0.00014,0.01855,{"date":355,"score":352,"percentile":356},"2026-01-29",0.01872,{"date":358,"score":352,"percentile":359},"2026-01-30",0.01871,{"date":361,"score":352,"percentile":362},"2026-01-31",0.01891,{"date":364,"score":352,"percentile":365},"2026-02-01",0.01915,[367],{"source":76,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":368,"cvss_v4_0":9},{"baseScore":74,"baseSeverity":369,"vectorString":77,"impactScore":370,"exploitabilityScore":371},"HIGH",8.7,4.6,[373,403],{"ecosystem":9,"name":374,"vendor":375,"product":375,"cpe_part":376,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":377},"Linux","linux","a",[378,385,389,392,394,398,402],{"version":379,"is_range":380,"range_type":82,"version_start":381,"version_start_type":382,"version_end":383,"version_end_type":384,"fixed_in":9},">= 352fbde14177d608a54120b6ff559ce5b3cf6238, \u003C d8a054b6e6824a8b52c3977ebd38c9583a63efac",true,"352fbde14177d608a54120b6ff559ce5b3cf6238","including","d8a054b6e6824a8b52c3977ebd38c9583a63efac","excluding",{"version":386,"is_range":380,"range_type":82,"version_start":387,"version_start_type":382,"version_end":388,"version_end_type":384,"fixed_in":9},">= 8256e0ca601051933e9395746817f3801fa9a6bf, \u003C a6550c9aa11e2f57f9cdaa6249cdd44d446be874","8256e0ca601051933e9395746817f3801fa9a6bf","a6550c9aa11e2f57f9cdaa6249cdd44d446be874",{"version":390,"is_range":380,"range_type":82,"version_start":387,"version_start_type":382,"version_end":391,"version_end_type":384,"fixed_in":9},">= 8256e0ca601051933e9395746817f3801fa9a6bf, \u003C 54ec8b08216f3be2cc98b33633d3c8ea79749895","54ec8b08216f3be2cc98b33633d3c8ea79749895",{"version":393,"is_range":70,"range_type":82,"version_start":393,"version_start_type":382,"version_end":393,"version_end_type":382,"fixed_in":9},"f14512f3ee09cda986191c8dd7f54972afa2c763",{"version":395,"is_range":380,"range_type":82,"version_start":396,"version_start_type":382,"version_end":397,"version_end_type":384,"fixed_in":9},">= 6.12.31, \u003C 6.12.35","6.12.31","6.12.35",{"version":399,"is_range":380,"range_type":82,"version_start":400,"version_start_type":382,"version_end":401,"version_end_type":384,"fixed_in":9},">= 6.14.9, \u003C 6.15","6.14.9","6.15",{"version":401,"is_range":70,"range_type":82,"version_start":401,"version_start_type":382,"version_end":401,"version_end_type":382,"fixed_in":9},{"ecosystem":9,"name":404,"vendor":375,"product":405,"cpe_part":376,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":406},"Linux Kernel","linux kernel",[407,410,412,416],{"version":408,"is_range":380,"range_type":409,"version_start":396,"version_start_type":382,"version_end":397,"version_end_type":384,"fixed_in":9},"gte6.12.31_lt6.12.35","cpe",{"version":411,"is_range":380,"range_type":409,"version_start":400,"version_start_type":382,"version_end":401,"version_end_type":384,"fixed_in":9},"gte6.14.9_lt6.15",{"version":413,"is_range":380,"range_type":409,"version_start":414,"version_start_type":382,"version_end":415,"version_end_type":384,"fixed_in":9},"gte6.15.1_lt6.15.4","6.15.1","6.15.4",{"version":401,"is_range":70,"range_type":409,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]