First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-38340

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: cs_dsp: Fix OOB memory read access in KUnit test

KASAN reported out of bounds access - cs_dsp_mock_bin_add_name_or_info(), because the source string length was rounded up to the allocation size.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= 7c052c6615297ff32032105130cd5f02059f7ae4, < 8f4cc454a0bb45b800bc7817c09c8f72e31901f3; >= 7c052c6615297ff32032105130cd5f02059f7ae4, < fe6446215bfad11cf3b446f38b28dc7708973c25
Linux	Linux	6.14

References

Timeline

Published: Jul 10, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-383417.8In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-map FW msg The seman CVE-2025-383427.1In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args(CVE-2025-383435.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA IEEE CVE-2025-383445.5In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi parse and parseext cache leaks ACPICA commit 8829e70e CVE-2025-383455.5In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi operand cache leak in dswstate.c ACPICA commit 987a3b CVE-2025-383467.8In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The followin CVE-2025-383475.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on ino and xnid syzbot reported a f2fs bu CVE-2025-383487.8In the Linux kernel, the following vulnerability has been resolved: wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() Robert CVE-2025-383497.8In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still holding the ep mutex CVE-2025-38359.6Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module.CVE-2025-383507.8In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Ce CVE-2025-383515.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In

CVE-2025-38340: High severity, CVSS 7.1 | Vulnix