In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Use memcpy() for BIOS version
The strlcat() with FORTIFY support is triggering a panic because it thinks the target buffer will overflow although the correct target buffer size is passed in.
Anyway, instead of memset() with 0 followed by a strlcat(), just use memcpy() and ensure that the resulting buffer is NULL terminated.
BIOSVersion is only used for the lpfcprintflog() which expects a properly terminated string.
[
{
"id": "CVE-2025-38332-1b204593",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c",
"function": "lpfc_sli4_get_ctl_attr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@75ea8375c5a83f46c47bfb3de6217c7589a8df93",
"digest": {
"length": 2287.0,
"function_hash": "36634412312403165087561910437897496227"
},
"deprecated": false
},
{
"id": "CVE-2025-38332-259194b9",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c",
"function": "lpfc_sli4_get_ctl_attr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@003baa7a1a152576d744bd655820449bbdb0248e",
"digest": {
"length": 2287.0,
"function_hash": "36634412312403165087561910437897496227"
},
"deprecated": false
},
{
"id": "CVE-2025-38332-568cb7bd",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c",
"function": "lpfc_sli4_get_ctl_attr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac7bfaa099ec3e4d7dfd0ab9726fc3bc7911365d",
"digest": {
"length": 2025.0,
"function_hash": "270192881340523239039473159046679500729"
},
"deprecated": false
},
{
"id": "CVE-2025-38332-728468ba",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c",
"function": "lpfc_sli4_get_ctl_attr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f63bf0d2b146956a2f2ff3b25cee71019e64561",
"digest": {
"length": 2287.0,
"function_hash": "36634412312403165087561910437897496227"
},
"deprecated": false
},
{
"id": "CVE-2025-38332-802b54c1",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac7bfaa099ec3e4d7dfd0ab9726fc3bc7911365d",
"digest": {
"line_hashes": [
"120897723599825205377888798434347252631",
"63409814208669187784548695310735588013",
"328905525840725011412593116151345094858",
"183973964291424541848538589228503212351",
"308819238780054469906938323240557276044",
"58381572926842000702635073638046213686"
],
"threshold": 0.9
},
"deprecated": false
},
{
"id": "CVE-2025-38332-dc9c3262",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@75ea8375c5a83f46c47bfb3de6217c7589a8df93",
"digest": {
"line_hashes": [
"15482781292290083957312514550101852751",
"71080377477169957016753062608577050312",
"175386026911477021876562848593183378247",
"183973964291424541848538589228503212351",
"142023932130903675702485405215374620666",
"60967068844363004753236953915277533664"
],
"threshold": 0.9
},
"deprecated": false
},
{
"id": "CVE-2025-38332-e0423e58",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f63bf0d2b146956a2f2ff3b25cee71019e64561",
"digest": {
"line_hashes": [
"15482781292290083957312514550101852751",
"71080377477169957016753062608577050312",
"175386026911477021876562848593183378247",
"183973964291424541848538589228503212351",
"142023932130903675702485405215374620666",
"60967068844363004753236953915277533664"
],
"threshold": 0.9
},
"deprecated": false
},
{
"id": "CVE-2025-38332-f9dcd21e",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@003baa7a1a152576d744bd655820449bbdb0248e",
"digest": {
"line_hashes": [
"15482781292290083957312514550101852751",
"71080377477169957016753062608577050312",
"175386026911477021876562848593183378247",
"183973964291424541848538589228503212351",
"142023932130903675702485405215374620666",
"60967068844363004753236953915277533664"
],
"threshold": 0.9
},
"deprecated": false
}
]