In the Linux kernel, the following vulnerability has been resolved:
net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
Maximum OTP and EEPROM size for hearthstone PCI1xxxx devices are 8 Kb and 64 Kb respectively. Adjust max size definitions and return correct EEPROM length based on device. Also prevent out-of-bound read/write.
[ { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e", "signature_version": "v1", "target": { "function": "lan743x_hs_otp_read", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "171504392018074546531916664110383106007", "length": 751.0 }, "id": "CVE-2025-38422-0c2a04ca" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2", "signature_version": "v1", "target": { "function": "lan743x_ethtool_get_eeprom_len", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "87516990449142746026973965489789479191", "length": 172.0 }, "id": "CVE-2025-38422-0e8e03cb" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e", "signature_version": "v1", "target": { "function": "lan743x_hs_eeprom_read", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "316311638783209687561877005267229530161", "length": 734.0 }, "id": "CVE-2025-38422-0fe0c120" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b", "signature_version": "v1", "target": { "function": "lan743x_hs_eeprom_read", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "316311638783209687561877005267229530161", "length": 734.0 }, "id": "CVE-2025-38422-10086e45" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b", "signature_version": "v1", "target": { "function": "lan743x_hs_otp_write", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "166507136030987254106279277765124377595", "length": 907.0 }, "id": "CVE-2025-38422-1160ea8a" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e", "signature_version": "v1", "target": { "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "34070108566571995169347426172557148136", "287647509921503020402775547384119787041", "114340403659518311673159331645100983924", "337213180183099813868947589766281380573", "10052765039152072263599781028713307547", "24319390073599721161640361310294925791", "337213180183099813868947589766281380573", "10052765039152072263599781028713307547", "24319390073599721161640361310294925791", "255382718800827458290058321405233251536", "22644164996309861344410213800174187804", "151918482982687551787662392032087046011", "255382718800827458290058321405233251536", "22644164996309861344410213800174187804", "151918482982687551787662392032087046011", "166771162232884097486337594683722223596", "12827794291241314256731069412966604310", "333749232947187216948727431049926944389", "236810508618023110456916939744676324501", "218533028967582462488841511473144164381" ] }, "id": "CVE-2025-38422-1c076982" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa", "signature_version": "v1", "target": { "function": "lan743x_hs_eeprom_read", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "316311638783209687561877005267229530161", "length": 734.0 }, "id": "CVE-2025-38422-2777b231" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b", "signature_version": "v1", "target": { "function": "lan743x_hs_eeprom_read", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "316311638783209687561877005267229530161", "length": 734.0 }, "id": "CVE-2025-38422-2b44901c" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b", "signature_version": "v1", "target": { "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "34070108566571995169347426172557148136", "287647509921503020402775547384119787041", "114340403659518311673159331645100983924", "337213180183099813868947589766281380573", "10052765039152072263599781028713307547", "24319390073599721161640361310294925791", "337213180183099813868947589766281380573", "10052765039152072263599781028713307547", "24319390073599721161640361310294925791", "255382718800827458290058321405233251536", "22644164996309861344410213800174187804", "151918482982687551787662392032087046011", "255382718800827458290058321405233251536", "22644164996309861344410213800174187804", "151918482982687551787662392032087046011", "166771162232884097486337594683722223596", "12827794291241314256731069412966604310", "333749232947187216948727431049926944389", "236810508618023110456916939744676324501", "218533028967582462488841511473144164381" ] }, "id": "CVE-2025-38422-2f5834ef" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e", "signature_version": "v1", "target": { "function": "lan743x_hs_otp_write", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "166507136030987254106279277765124377595", "length": 907.0 }, "id": "CVE-2025-38422-33f18682" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b", "signature_version": "v1", "target": { "function": "lan743x_hs_otp_write", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "166507136030987254106279277765124377595", "length": 907.0 }, "id": "CVE-2025-38422-3b194eb9" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2", "signature_version": "v1", "target": { "function": "lan743x_hs_eeprom_write", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "328835446201048103862376101805279406530", "length": 703.0 }, "id": "CVE-2025-38422-46c6b32f" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2", "signature_version": "v1", "target": { "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "34070108566571995169347426172557148136", "287647509921503020402775547384119787041", "114340403659518311673159331645100983924", "337213180183099813868947589766281380573", "10052765039152072263599781028713307547", "24319390073599721161640361310294925791", "337213180183099813868947589766281380573", "10052765039152072263599781028713307547", "24319390073599721161640361310294925791", "255382718800827458290058321405233251536", "22644164996309861344410213800174187804", "151918482982687551787662392032087046011", "255382718800827458290058321405233251536", "22644164996309861344410213800174187804", "151918482982687551787662392032087046011", "166771162232884097486337594683722223596", "12827794291241314256731069412966604310", "333749232947187216948727431049926944389", "236810508618023110456916939744676324501", "218533028967582462488841511473144164381" ] }, "id": "CVE-2025-38422-4a61044f" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b", "signature_version": "v1", "target": { "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "34070108566571995169347426172557148136", "287647509921503020402775547384119787041", "114340403659518311673159331645100983924", "337213180183099813868947589766281380573", "10052765039152072263599781028713307547", "24319390073599721161640361310294925791", "337213180183099813868947589766281380573", "10052765039152072263599781028713307547", "24319390073599721161640361310294925791", "255382718800827458290058321405233251536", "22644164996309861344410213800174187804", "151918482982687551787662392032087046011", "255382718800827458290058321405233251536", "22644164996309861344410213800174187804", "151918482982687551787662392032087046011", "166771162232884097486337594683722223596", "12827794291241314256731069412966604310", "333749232947187216948727431049926944389", "236810508618023110456916939744676324501", "218533028967582462488841511473144164381" ] }, "id": "CVE-2025-38422-4b83d1cc" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b", "signature_version": "v1", "target": { "function": "lan743x_ethtool_get_eeprom_len", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "87516990449142746026973965489789479191", "length": 172.0 }, "id": "CVE-2025-38422-6ebee39a" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b", "signature_version": "v1", "target": { "function": "lan743x_ethtool_get_eeprom_len", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "87516990449142746026973965489789479191", "length": 172.0 }, "id": "CVE-2025-38422-729e9d88" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e", "signature_version": "v1", "target": { "function": "lan743x_hs_eeprom_write", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "328835446201048103862376101805279406530", "length": 703.0 }, "id": "CVE-2025-38422-771dccdc" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2", "signature_version": "v1", "target": { "function": "lan743x_hs_otp_read", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "171504392018074546531916664110383106007", "length": 751.0 }, "id": "CVE-2025-38422-784c4ea7" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa", "signature_version": "v1", "target": { "function": "lan743x_ethtool_get_eeprom_len", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "87516990449142746026973965489789479191", "length": 172.0 }, "id": "CVE-2025-38422-826bf5a1" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b9935586a9b54d2da27901b830d3cf46ad66a1e", "signature_version": "v1", "target": { "function": "lan743x_ethtool_get_eeprom_len", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "87516990449142746026973965489789479191", "length": 172.0 }, "id": "CVE-2025-38422-9c0bdd5e" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa", "signature_version": "v1", "target": { "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "34070108566571995169347426172557148136", "287647509921503020402775547384119787041", "114340403659518311673159331645100983924", "337213180183099813868947589766281380573", "10052765039152072263599781028713307547", "24319390073599721161640361310294925791", "337213180183099813868947589766281380573", "10052765039152072263599781028713307547", "24319390073599721161640361310294925791", "255382718800827458290058321405233251536", "22644164996309861344410213800174187804", "151918482982687551787662392032087046011", "255382718800827458290058321405233251536", "22644164996309861344410213800174187804", "151918482982687551787662392032087046011", "166771162232884097486337594683722223596", "12827794291241314256731069412966604310", "333749232947187216948727431049926944389", "236810508618023110456916939744676324501", "218533028967582462488841511473144164381" ] }, "id": "CVE-2025-38422-aaff6569" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa", "signature_version": "v1", "target": { "function": "lan743x_hs_eeprom_write", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "328835446201048103862376101805279406530", "length": 703.0 }, "id": "CVE-2025-38422-acccec37" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b", "signature_version": "v1", "target": { "function": "lan743x_hs_eeprom_write", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "328835446201048103862376101805279406530", "length": 703.0 }, "id": "CVE-2025-38422-c6b015bb" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa", "signature_version": "v1", "target": { "function": "lan743x_hs_otp_read", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "171504392018074546531916664110383106007", "length": 751.0 }, "id": "CVE-2025-38422-c801741e" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2", "signature_version": "v1", "target": { "function": "lan743x_hs_otp_write", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "166507136030987254106279277765124377595", "length": 907.0 }, "id": "CVE-2025-38422-ca3fbb42" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c41d2a2aa3817946eb613522200cab55513ddaa", "signature_version": "v1", "target": { "function": "lan743x_hs_otp_write", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "166507136030987254106279277765124377595", "length": 907.0 }, "id": "CVE-2025-38422-d4708511" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b", "signature_version": "v1", "target": { "function": "lan743x_hs_eeprom_write", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "328835446201048103862376101805279406530", "length": 703.0 }, "id": "CVE-2025-38422-e267ce75" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088279ff18cdc437d6fac5890e0c52c624f78a5b", "signature_version": "v1", "target": { "function": "lan743x_hs_otp_read", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "171504392018074546531916664110383106007", "length": 751.0 }, "id": "CVE-2025-38422-e289fa4b" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51318d644c993b3f7a60b8616a6a5adc1e967cd2", "signature_version": "v1", "target": { "function": "lan743x_hs_eeprom_read", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "316311638783209687561877005267229530161", "length": 734.0 }, "id": "CVE-2025-38422-e479c1e5" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6b4201d74d0a49af2123abf2c9d142e59566714b", "signature_version": "v1", "target": { "function": "lan743x_hs_otp_read", "file": "drivers/net/ethernet/microchip/lan743x_ethtool.c" }, "digest": { "function_hash": "171504392018074546531916664110383106007", "length": 751.0 }, "id": "CVE-2025-38422-e51c6734" } ]