01 Record

CVE-2025-38348

wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 6.7% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-07-10 08:15Z1 YR AGO

Last updated

2026-05-11 21:26Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

9235ece6a72554efa120762ca237b99106c4c9bd278e83a0b6e9c06c88490b56

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux7cb770729ba895f73253dfcd46c3fcba45d896f9 to < 12134f79e53eb56b0b0b7447fa0c512acf6a8422, 7cb770729ba895f73253dfcd46c3fcba45d896f9 to < 9701f842031b825e2fd5f22d064166f8f13f6e4d, 7cb770729ba895f73253dfcd46c3fcba45d896f9 to < 1f7f8168abe8cbe845ab8bb557228d44784a6b57, 7cb770729ba895f73253dfcd46c3fcba45d896f9 to < f39b2f8c1549a539846e083790fad396ef6cd802, 7cb770729ba895f73253dfcd46c3fcba45d896f9 to < 0e4dc150423b829c35cbcf399481ca11594fc036, 7cb770729ba895f73253dfcd46c3fcba45d896f9 to < 6d05390d20f110de37d051a3e063ef0a542d01fb, 7cb770729ba895f73253dfcd46c3fcba45d896f9 to < 714afb4c38edd19a057d519c1f9c5d164b43de94, 7cb770729ba895f73253dfcd46c3fcba45d896f9 to < da1b9a55ff116cb040528ef664c70a4eec03ae99, 2.6.28—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/12134f79e53eb56b0b0b7447fa0c512acf6a8422
git.kernel.orghttps://git.kernel.org/stable/c/9701f842031b825e2fd5f22d064166f8f13f6e4d
git.kernel.orghttps://git.kernel.org/stable/c/1f7f8168abe8cbe845ab8bb557228d44784a6b57
git.kernel.orghttps://git.kernel.org/stable/c/f39b2f8c1549a539846e083790fad396ef6cd802
git.kernel.orghttps://git.kernel.org/stable/c/0e4dc150423b829c35cbcf399481ca11594fc036
git.kernel.orghttps://git.kernel.org/stable/c/6d05390d20f110de37d051a3e063ef0a542d01fb
git.kernel.orghttps://git.kernel.org/stable/c/714afb4c38edd19a057d519c1f9c5d164b43de94
git.kernel.orghttps://git.kernel.org/stable/c/da1b9a55ff116cb040528ef664c70a4eec03ae99
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38348

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38348

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References