VULNERABILITY INTELLIGENCE
CVE-2025-38426
CVSS score5.5 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2025-07-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add basic validation for RAS header If RAS header read from EEPROM is corrupted, it could result in trying to allocate huge memory for reading the records. Add some validation to header fields.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo