CVE-2025-38142
hwmon: (asus-ec-sensors) check sensor index in read_string()
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus-ec-sensors) check sensor index in read_string() Prevent a potential invalid memory access when the requested sensor is not found. find_ec_sensor_index() may return a negative value (e.g. -ENOENT), but its result was used without checking, which could lead to undefined behavior when passed to get_sensor_info(). Add a proper check to return -EINVAL if sensor_index is negative. Found by Linux Verification Center (linuxtesting.org) with SVACE. [groeck: Return error code returned from find_ec_sensor_index]
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Jul 3, 2025 |
| Last Updated | May 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
d0ddfd241e5719d696bc0b081e260db69d368668 < 6bf529ce84dccc0074dbc704e70aee4aa545057e d0ddfd241e5719d696bc0b081e260db69d368668 < 4e9e45746b861ebd54c03ef301da2cb8fc990536 d0ddfd241e5719d696bc0b081e260db69d368668 < 19bd9cde38dd4ca1771aed7afba623e7f4247c8e d0ddfd241e5719d696bc0b081e260db69d368668 < 7eeb3df6f07a886bdfd52757ede127a59a8784dc d0ddfd241e5719d696bc0b081e260db69d368668 < 25be318324563c63cbd9cb53186203a08d2f83a1
Linux / Linux
5.18
References
git.kernel.org: https://git.kernel.org/stable/c/6bf529ce84dccc0074dbc704e70aee4aa545057e git.kernel.org: https://git.kernel.org/stable/c/4e9e45746b861ebd54c03ef301da2cb8fc990536 git.kernel.org: https://git.kernel.org/stable/c/19bd9cde38dd4ca1771aed7afba623e7f4247c8e git.kernel.org: https://git.kernel.org/stable/c/7eeb3df6f07a886bdfd52757ede127a59a8784dc git.kernel.org: https://git.kernel.org/stable/c/25be318324563c63cbd9cb53186203a08d2f83a1 lists.debian.org: https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html