In the Linux kernel, the following vulnerability has been resolved:
net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
Maximum OTP and EEPROM size for hearthstone PCI1xxxx devices are 8 Kb and 64 Kb respectively. Adjust max size definitions and return correct EEPROM length based on device. Also prevent out-of-bound read/write.
[
{
"id": "CVE-2025-38422-0c2a04ca",
"deprecated": false,
"target": {
"function": "lan743x_hs_otp_read",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e",
"digest": {
"length": 751.0,
"function_hash": "171504392018074546531916664110383106007"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-0e8e03cb",
"deprecated": false,
"target": {
"function": "lan743x_ethtool_get_eeprom_len",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2",
"digest": {
"length": 172.0,
"function_hash": "87516990449142746026973965489789479191"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-0fe0c120",
"deprecated": false,
"target": {
"function": "lan743x_hs_eeprom_read",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e",
"digest": {
"length": 734.0,
"function_hash": "316311638783209687561877005267229530161"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-10086e45",
"deprecated": false,
"target": {
"function": "lan743x_hs_eeprom_read",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b",
"digest": {
"length": 734.0,
"function_hash": "316311638783209687561877005267229530161"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-1160ea8a",
"deprecated": false,
"target": {
"function": "lan743x_hs_otp_write",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b",
"digest": {
"length": 907.0,
"function_hash": "166507136030987254106279277765124377595"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-1c076982",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e",
"digest": {
"line_hashes": [
"34070108566571995169347426172557148136",
"287647509921503020402775547384119787041",
"114340403659518311673159331645100983924",
"337213180183099813868947589766281380573",
"10052765039152072263599781028713307547",
"24319390073599721161640361310294925791",
"337213180183099813868947589766281380573",
"10052765039152072263599781028713307547",
"24319390073599721161640361310294925791",
"255382718800827458290058321405233251536",
"22644164996309861344410213800174187804",
"151918482982687551787662392032087046011",
"255382718800827458290058321405233251536",
"22644164996309861344410213800174187804",
"151918482982687551787662392032087046011",
"166771162232884097486337594683722223596",
"12827794291241314256731069412966604310",
"333749232947187216948727431049926944389",
"236810508618023110456916939744676324501",
"218533028967582462488841511473144164381"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38422-2777b231",
"deprecated": false,
"target": {
"function": "lan743x_hs_eeprom_read",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa",
"digest": {
"length": 734.0,
"function_hash": "316311638783209687561877005267229530161"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-2b44901c",
"deprecated": false,
"target": {
"function": "lan743x_hs_eeprom_read",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b",
"digest": {
"length": 734.0,
"function_hash": "316311638783209687561877005267229530161"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-2f5834ef",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b",
"digest": {
"line_hashes": [
"34070108566571995169347426172557148136",
"287647509921503020402775547384119787041",
"114340403659518311673159331645100983924",
"337213180183099813868947589766281380573",
"10052765039152072263599781028713307547",
"24319390073599721161640361310294925791",
"337213180183099813868947589766281380573",
"10052765039152072263599781028713307547",
"24319390073599721161640361310294925791",
"255382718800827458290058321405233251536",
"22644164996309861344410213800174187804",
"151918482982687551787662392032087046011",
"255382718800827458290058321405233251536",
"22644164996309861344410213800174187804",
"151918482982687551787662392032087046011",
"166771162232884097486337594683722223596",
"12827794291241314256731069412966604310",
"333749232947187216948727431049926944389",
"236810508618023110456916939744676324501",
"218533028967582462488841511473144164381"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38422-33f18682",
"deprecated": false,
"target": {
"function": "lan743x_hs_otp_write",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e",
"digest": {
"length": 907.0,
"function_hash": "166507136030987254106279277765124377595"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-3b194eb9",
"deprecated": false,
"target": {
"function": "lan743x_hs_otp_write",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b",
"digest": {
"length": 907.0,
"function_hash": "166507136030987254106279277765124377595"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-46c6b32f",
"deprecated": false,
"target": {
"function": "lan743x_hs_eeprom_write",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2",
"digest": {
"length": 703.0,
"function_hash": "328835446201048103862376101805279406530"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-4a61044f",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2",
"digest": {
"line_hashes": [
"34070108566571995169347426172557148136",
"287647509921503020402775547384119787041",
"114340403659518311673159331645100983924",
"337213180183099813868947589766281380573",
"10052765039152072263599781028713307547",
"24319390073599721161640361310294925791",
"337213180183099813868947589766281380573",
"10052765039152072263599781028713307547",
"24319390073599721161640361310294925791",
"255382718800827458290058321405233251536",
"22644164996309861344410213800174187804",
"151918482982687551787662392032087046011",
"255382718800827458290058321405233251536",
"22644164996309861344410213800174187804",
"151918482982687551787662392032087046011",
"166771162232884097486337594683722223596",
"12827794291241314256731069412966604310",
"333749232947187216948727431049926944389",
"236810508618023110456916939744676324501",
"218533028967582462488841511473144164381"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38422-4b83d1cc",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b",
"digest": {
"line_hashes": [
"34070108566571995169347426172557148136",
"287647509921503020402775547384119787041",
"114340403659518311673159331645100983924",
"337213180183099813868947589766281380573",
"10052765039152072263599781028713307547",
"24319390073599721161640361310294925791",
"337213180183099813868947589766281380573",
"10052765039152072263599781028713307547",
"24319390073599721161640361310294925791",
"255382718800827458290058321405233251536",
"22644164996309861344410213800174187804",
"151918482982687551787662392032087046011",
"255382718800827458290058321405233251536",
"22644164996309861344410213800174187804",
"151918482982687551787662392032087046011",
"166771162232884097486337594683722223596",
"12827794291241314256731069412966604310",
"333749232947187216948727431049926944389",
"236810508618023110456916939744676324501",
"218533028967582462488841511473144164381"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38422-6ebee39a",
"deprecated": false,
"target": {
"function": "lan743x_ethtool_get_eeprom_len",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b",
"digest": {
"length": 172.0,
"function_hash": "87516990449142746026973965489789479191"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-729e9d88",
"deprecated": false,
"target": {
"function": "lan743x_ethtool_get_eeprom_len",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b",
"digest": {
"length": 172.0,
"function_hash": "87516990449142746026973965489789479191"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-771dccdc",
"deprecated": false,
"target": {
"function": "lan743x_hs_eeprom_write",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e",
"digest": {
"length": 703.0,
"function_hash": "328835446201048103862376101805279406530"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-784c4ea7",
"deprecated": false,
"target": {
"function": "lan743x_hs_otp_read",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2",
"digest": {
"length": 751.0,
"function_hash": "171504392018074546531916664110383106007"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-826bf5a1",
"deprecated": false,
"target": {
"function": "lan743x_ethtool_get_eeprom_len",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa",
"digest": {
"length": 172.0,
"function_hash": "87516990449142746026973965489789479191"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-9c0bdd5e",
"deprecated": false,
"target": {
"function": "lan743x_ethtool_get_eeprom_len",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e",
"digest": {
"length": 172.0,
"function_hash": "87516990449142746026973965489789479191"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-aaff6569",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa",
"digest": {
"line_hashes": [
"34070108566571995169347426172557148136",
"287647509921503020402775547384119787041",
"114340403659518311673159331645100983924",
"337213180183099813868947589766281380573",
"10052765039152072263599781028713307547",
"24319390073599721161640361310294925791",
"337213180183099813868947589766281380573",
"10052765039152072263599781028713307547",
"24319390073599721161640361310294925791",
"255382718800827458290058321405233251536",
"22644164996309861344410213800174187804",
"151918482982687551787662392032087046011",
"255382718800827458290058321405233251536",
"22644164996309861344410213800174187804",
"151918482982687551787662392032087046011",
"166771162232884097486337594683722223596",
"12827794291241314256731069412966604310",
"333749232947187216948727431049926944389",
"236810508618023110456916939744676324501",
"218533028967582462488841511473144164381"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38422-acccec37",
"deprecated": false,
"target": {
"function": "lan743x_hs_eeprom_write",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa",
"digest": {
"length": 703.0,
"function_hash": "328835446201048103862376101805279406530"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-c6b015bb",
"deprecated": false,
"target": {
"function": "lan743x_hs_eeprom_write",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b",
"digest": {
"length": 703.0,
"function_hash": "328835446201048103862376101805279406530"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-c801741e",
"deprecated": false,
"target": {
"function": "lan743x_hs_otp_read",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa",
"digest": {
"length": 751.0,
"function_hash": "171504392018074546531916664110383106007"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-ca3fbb42",
"deprecated": false,
"target": {
"function": "lan743x_hs_otp_write",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2",
"digest": {
"length": 907.0,
"function_hash": "166507136030987254106279277765124377595"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-d4708511",
"deprecated": false,
"target": {
"function": "lan743x_hs_otp_write",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa",
"digest": {
"length": 907.0,
"function_hash": "166507136030987254106279277765124377595"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-e267ce75",
"deprecated": false,
"target": {
"function": "lan743x_hs_eeprom_write",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b",
"digest": {
"length": 703.0,
"function_hash": "328835446201048103862376101805279406530"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-e289fa4b",
"deprecated": false,
"target": {
"function": "lan743x_hs_otp_read",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b",
"digest": {
"length": 751.0,
"function_hash": "171504392018074546531916664110383106007"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-e479c1e5",
"deprecated": false,
"target": {
"function": "lan743x_hs_eeprom_read",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2",
"digest": {
"length": 734.0,
"function_hash": "316311638783209687561877005267229530161"
},
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38422-e51c6734",
"deprecated": false,
"target": {
"function": "lan743x_hs_otp_read",
"file": "drivers/net/ethernet/microchip/lan743x_ethtool.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b",
"digest": {
"length": 751.0,
"function_hash": "171504392018074546531916664110383106007"
},
"signature_version": "v1",
"signature_type": "Function"
}
]