In the Linux kernel, the following vulnerability has been resolved:
Input: ims-pcu - check record size in imspcuflash_firmware()
The "len" variable comes from the firmware and we generally do trust firmware, but it's always better to double check. If the "len" is too large it could result in memory corruption when we do "memcpy(fragment->data, rec->data, len);"
[
{
"target": {
"function": "ims_pcu_flash_firmware",
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5a2481dc2a0b430f49276d7482793a8923631d6",
"deprecated": false,
"id": "CVE-2025-38428-0a037afd",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "31943437458450455755673458380222336726",
"length": 1250.0
}
},
{
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d63706d9f73846106fde28b284f08e01b92ce9f1",
"deprecated": false,
"id": "CVE-2025-38428-0ed1caab",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
]
}
},
{
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e03f1c7d50343bf21da54873301bc4fa647479f",
"deprecated": false,
"id": "CVE-2025-38428-11a7ecdb",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
]
}
},
{
"target": {
"function": "ims_pcu_flash_firmware",
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74661516daee1eadebede8dc607b6830530096ec",
"deprecated": false,
"id": "CVE-2025-38428-2598b715",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "31943437458450455755673458380222336726",
"length": 1250.0
}
},
{
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17474a56acf708bf6b2d174c06ed26abad0a9fd6",
"deprecated": false,
"id": "CVE-2025-38428-40301a89",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
]
}
},
{
"target": {
"function": "ims_pcu_flash_firmware",
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e03f1c7d50343bf21da54873301bc4fa647479f",
"deprecated": false,
"id": "CVE-2025-38428-62578657",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "31943437458450455755673458380222336726",
"length": 1250.0
}
},
{
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a8cd6ae8393e2eaebf51d420d5374821ef2af87",
"deprecated": false,
"id": "CVE-2025-38428-66d56676",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
]
}
},
{
"target": {
"function": "ims_pcu_flash_firmware",
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17474a56acf708bf6b2d174c06ed26abad0a9fd6",
"deprecated": false,
"id": "CVE-2025-38428-9f58ff98",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "31943437458450455755673458380222336726",
"length": 1250.0
}
},
{
"target": {
"function": "ims_pcu_flash_firmware",
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a8cd6ae8393e2eaebf51d420d5374821ef2af87",
"deprecated": false,
"id": "CVE-2025-38428-bae83b82",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "31943437458450455755673458380222336726",
"length": 1250.0
}
},
{
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74661516daee1eadebede8dc607b6830530096ec",
"deprecated": false,
"id": "CVE-2025-38428-bbf59430",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
]
}
},
{
"target": {
"function": "ims_pcu_flash_firmware",
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a95ef0199e80f3384eb992889322957d26c00102",
"deprecated": false,
"id": "CVE-2025-38428-bcd3ddba",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "31943437458450455755673458380222336726",
"length": 1250.0
}
},
{
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a95ef0199e80f3384eb992889322957d26c00102",
"deprecated": false,
"id": "CVE-2025-38428-bfd358f3",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
]
}
},
{
"target": {
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5a2481dc2a0b430f49276d7482793a8923631d6",
"deprecated": false,
"id": "CVE-2025-38428-c2a5be3a",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"319422333056068627308947762861191719035",
"230922172335236022323703326930714444885",
"301981294086372831718860756184175048797"
]
}
},
{
"target": {
"function": "ims_pcu_flash_firmware",
"file": "drivers/input/misc/ims-pcu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d63706d9f73846106fde28b284f08e01b92ce9f1",
"deprecated": false,
"id": "CVE-2025-38428-d0c47543",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "31943437458450455755673458380222336726",
"length": 1250.0
}
}
]