logo_clicknbuy.png

CVE-2025-37887 – Linux Kernel PDS_CORE Devlink Command Buffer Overflow

The following table lists the changes that have been made to the
CVE-2025-37887 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    May. 09, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result

    If the FW doesn’t support the PDS_CORE_CMD_FW_CONTROL command
    the driver might at the least print garbage and at the worst
    crash when the user runs the “devlink dev info” devlink command.

    This happens because the stack variable fw_list is not 0
    initialized which results in fw_list.num_fw_slots being a
    garbage value from the stack. Then the driver tries to access
    fw_list.fw_names[i] with i >= ARRAY_SIZE and runs off the end
    of the array.

    Fix this by initializing the fw_list and by not failing
    completely if the devcmd fails because other useful information
    is printed via devlink dev info even if the devcmd fails.
    Added Reference https://git.kernel.org/stable/c/12a4651a80dbe4589a84e26785fbbe1ed4d043b7
    Added Reference https://git.kernel.org/stable/c/2567daad69cd1107fc0ec29b1615f110d7cf7385
    Added Reference https://git.kernel.org/stable/c/6702f5c6b22deaa95bf84f526148174a160a02cb
    Added Reference https://git.kernel.org/stable/c/cdd784c96fe2e5edbf0ed9b3e96fe776e8092385
Share the Post:

Related Posts