CVE-2025-71197

Not scored yetLast modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

w1: therm: Fix off-by-one buffer overflow in alarms_store

The sysfs buffer passed to alarms_store() is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byte. The original code then allocated 'size' bytes and used strcpy() to copy 'buf', which always writes one byte past the allocated buffer since strcpy() copies until the NUL terminator at index 'size'.

Fix this by parsing the 'buf' parameter directly using simple_strtoll() without allocating any intermediate memory or string copying. This removes the overflow while simplifying the code.

Metrics

No CVSS score has been published yet.

Affected software

No affected versions have been published.

Timeline

Published
Feb 4, 2026
Last modified
Oct 15, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-71198In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detecCVE-2025-71199In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adcCVE-2025-71209.8A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown fuCVE-2025-712005.5In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mCVE-2025-712017.1In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early read unlock of page with EOF in middle The read resulCVE-2025-712025.5In the Linux kernel, the following vulnerability has been resolved: iommu/sva: invalidate stale IOTLB entries for kernel address space IntCVE-2025-712037.0In the Linux kernel, the following vulnerability has been resolved: riscv: Sanitize syscall table indexing under speculation The syscall nCVE-2025-712045.5In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in parse_durable_handle_context() When tCVE-2025-71218.8A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of CVE-2025-712109.8A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oCVE-2025-712119.8A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oCVE-2025-712127.8A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected insta
CVE-2025-71197: Unscored | Vulnix