In the Linux kernel, the following vulnerability has been resolved:
hwmon: (corsair-cpro) Validate the size of the received input buffer
Add bufferrecvsize to store the size of the received bytes. Validate bufferrecvsize in sendusbcmd().
[
{
"signature_version": "v1",
"digest": {
"function_hash": "140592509884036790329149387463908457090",
"length": 399.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2771d2ee3d95700f34e1e4df6a445c90565cd4e9",
"id": "CVE-2025-38548-0289eb55",
"target": {
"function": "ccp_raw_event",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "305952184870419872460348854667137941527",
"length": 720.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4eb5cc48399f89b63acdbfe912fa5c8fe2900147",
"id": "CVE-2025-38548-0768cebc",
"target": {
"function": "send_usb_cmd",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "140592509884036790329149387463908457090",
"length": 399.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda5e38cc4dd2dcb422840540374910ef2818494",
"id": "CVE-2025-38548-0f04b974",
"target": {
"function": "ccp_raw_event",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "305952184870419872460348854667137941527",
"length": 720.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@495a4f0dce9c8c4478c242209748f1ee9e4d5820",
"id": "CVE-2025-38548-16c6728f",
"target": {
"function": "send_usb_cmd",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "140592509884036790329149387463908457090",
"length": 399.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@495a4f0dce9c8c4478c242209748f1ee9e4d5820",
"id": "CVE-2025-38548-19f656db",
"target": {
"function": "ccp_raw_event",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "305952184870419872460348854667137941527",
"length": 720.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c4bdc8a852e446080adc8ceb90ddd67a56e1bb8",
"id": "CVE-2025-38548-25e51e2f",
"target": {
"function": "send_usb_cmd",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "140592509884036790329149387463908457090",
"length": 399.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db770e2922389753ddbd6663a5516a32b97b743",
"id": "CVE-2025-38548-2748cdce",
"target": {
"function": "ccp_raw_event",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"100889771964892691770830143151687906997",
"179874832237574713705104621138790094625",
"118928083873698220056324096121135047560",
"236068381823577171463046476793923656654",
"236394300003463505754356189279202087775",
"242541695960646280499103615975431844954",
"97191819187891982697985857838502560524",
"50397356123254193102778634293795532681",
"1096555769317570328913712470867188625",
"83179079340139023654107077112138897388",
"183370953296247389343096883344054753247"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e6f4d9cfbda52700c126c5a2b93dd2042e8680c",
"id": "CVE-2025-38548-3723e911",
"target": {
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "305952184870419872460348854667137941527",
"length": 720.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e6f4d9cfbda52700c126c5a2b93dd2042e8680c",
"id": "CVE-2025-38548-38d3aa1b",
"target": {
"function": "send_usb_cmd",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "305952184870419872460348854667137941527",
"length": 720.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2771d2ee3d95700f34e1e4df6a445c90565cd4e9",
"id": "CVE-2025-38548-547f9cf1",
"target": {
"function": "send_usb_cmd",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"100889771964892691770830143151687906997",
"179874832237574713705104621138790094625",
"118928083873698220056324096121135047560",
"236068381823577171463046476793923656654",
"236394300003463505754356189279202087775",
"242541695960646280499103615975431844954",
"97191819187891982697985857838502560524",
"50397356123254193102778634293795532681",
"1096555769317570328913712470867188625",
"83179079340139023654107077112138897388",
"183370953296247389343096883344054753247"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db770e2922389753ddbd6663a5516a32b97b743",
"id": "CVE-2025-38548-5e2da6e1",
"target": {
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"100889771964892691770830143151687906997",
"179874832237574713705104621138790094625",
"118928083873698220056324096121135047560",
"236068381823577171463046476793923656654",
"236394300003463505754356189279202087775",
"242541695960646280499103615975431844954",
"97191819187891982697985857838502560524",
"50397356123254193102778634293795532681",
"1096555769317570328913712470867188625",
"83179079340139023654107077112138897388",
"183370953296247389343096883344054753247"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4eb5cc48399f89b63acdbfe912fa5c8fe2900147",
"id": "CVE-2025-38548-72435087",
"target": {
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"100889771964892691770830143151687906997",
"179874832237574713705104621138790094625",
"118928083873698220056324096121135047560",
"236068381823577171463046476793923656654",
"236394300003463505754356189279202087775",
"242541695960646280499103615975431844954",
"97191819187891982697985857838502560524",
"50397356123254193102778634293795532681",
"1096555769317570328913712470867188625",
"83179079340139023654107077112138897388",
"183370953296247389343096883344054753247"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2771d2ee3d95700f34e1e4df6a445c90565cd4e9",
"id": "CVE-2025-38548-8518d724",
"target": {
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"100889771964892691770830143151687906997",
"179874832237574713705104621138790094625",
"118928083873698220056324096121135047560",
"236068381823577171463046476793923656654",
"236394300003463505754356189279202087775",
"242541695960646280499103615975431844954",
"97191819187891982697985857838502560524",
"50397356123254193102778634293795532681",
"1096555769317570328913712470867188625",
"83179079340139023654107077112138897388",
"183370953296247389343096883344054753247"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda5e38cc4dd2dcb422840540374910ef2818494",
"id": "CVE-2025-38548-941fb82b",
"target": {
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "140592509884036790329149387463908457090",
"length": 399.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c4bdc8a852e446080adc8ceb90ddd67a56e1bb8",
"id": "CVE-2025-38548-96d5c4b0",
"target": {
"function": "ccp_raw_event",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"100889771964892691770830143151687906997",
"179874832237574713705104621138790094625",
"118928083873698220056324096121135047560",
"236068381823577171463046476793923656654",
"236394300003463505754356189279202087775",
"242541695960646280499103615975431844954",
"97191819187891982697985857838502560524",
"50397356123254193102778634293795532681",
"1096555769317570328913712470867188625",
"83179079340139023654107077112138897388",
"183370953296247389343096883344054753247"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@495a4f0dce9c8c4478c242209748f1ee9e4d5820",
"id": "CVE-2025-38548-97098c4d",
"target": {
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "140592509884036790329149387463908457090",
"length": 399.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e6f4d9cfbda52700c126c5a2b93dd2042e8680c",
"id": "CVE-2025-38548-a3212efd",
"target": {
"function": "ccp_raw_event",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"100889771964892691770830143151687906997",
"179874832237574713705104621138790094625",
"118928083873698220056324096121135047560",
"236068381823577171463046476793923656654",
"236394300003463505754356189279202087775",
"242541695960646280499103615975431844954",
"97191819187891982697985857838502560524",
"50397356123254193102778634293795532681",
"1096555769317570328913712470867188625",
"83179079340139023654107077112138897388",
"183370953296247389343096883344054753247"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c4bdc8a852e446080adc8ceb90ddd67a56e1bb8",
"id": "CVE-2025-38548-cccb6e10",
"target": {
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "305952184870419872460348854667137941527",
"length": 720.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db770e2922389753ddbd6663a5516a32b97b743",
"id": "CVE-2025-38548-e129635a",
"target": {
"function": "send_usb_cmd",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "305952184870419872460348854667137941527",
"length": 720.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eda5e38cc4dd2dcb422840540374910ef2818494",
"id": "CVE-2025-38548-e5221b1e",
"target": {
"function": "send_usb_cmd",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "140592509884036790329149387463908457090",
"length": 399.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4eb5cc48399f89b63acdbfe912fa5c8fe2900147",
"id": "CVE-2025-38548-fd89cf56",
"target": {
"function": "ccp_raw_event",
"file": "drivers/hwmon/corsair-cpro.c"
},
"deprecated": false,
"signature_type": "Function"
}
]