ibmvnic: Use kernel helpers for hex dumps

Answer in brief

CVE-2025-22104 records a Unknown severity vulnerability in ibmvnic: Use kernel helpers for hex dumps. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Apr 16, 2025Updated Sep 2, 2026Source checked Sep 2, 2026First seen by HOL Sep 2, 2026Material review Sep 2, 2026

Upstream Advisory

Key facts

Risk: Unknown severitySource severity not reported
Exploitation: Not marked as known exploited
Affected software: 2 mapped packages or products
Fix availability: Available

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Linux/Linuxgeneric	>=032c5e82847a2214c3196a90f0aeba0ce252de58 <19efa170e01207c8ada726f3f6c65b31fcba2a73 \|\| >=032c5e82847a2214c3196a90f0aeba0ce252de58 <9bc078818ec76344c2e06b81d7aee2df3adecfbf \|\| >=032c5e82847a2214c3196a90f0aeba0ce252de58 <005fee039dd845122d313ac8f2122b0d09dc5d7b \|\| >=032c5e82847a2214c3196a90f0aeba0ce252de58 <ae6b1d6c1acee3a2000394d83ec9f1028321e207 \|\| >=032c5e82847a2214c3196a90f0aeba0ce252de58 <d93a6caab5d7d9b5ce034d75b1e1e993338e3852	19efa170e01207c8ada726f3f6c65b31fcba2a73, 9bc078818ec76344c2e06b81d7aee2df3adecfbf, 005fee039dd845122d313ac8f2122b0d09dc5d7b, ae6b1d6c1acee3a2000394d83ec9f1028321e207, d93a6caab5d7d9b5ce034d75b1e1e993338e3852
Linux/Linuxgeneric	4.5	Not reported

Recommended response

Check inventory. Check lockfiles and deployed manifests for Linux/Linux, Linux/Linux.
Review the reported fix. Update Linux/Linux to 19efa170e01207c8ada726f3f6c65b31fcba2a73 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Apr 16, 2025
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Sep 2, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Sep 2, 2026

Sources and claim methodology

Upstream source description

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8 then a read buffer overflow was possible. Therefore, create a new ibmvnic function that loops over a buffer and calls hex_dump_to_buffer instead. This patch address KASAN reports like the one below: ibmvnic 30000003 env3: Login Buffer: ibmvnic 30000003 env3: 01000000af000000 <...> ibmvnic 30000003 env3: 2e6d62692e736261 ibmvnic 30000003 env3: 65050003006d6f63 ================================================================== BUG: KASAN: slab-out-of-bounds in ibmvnic_login+0xacc/0xffc [ibmvnic] Read of size 8 at addr c0000001331a9aa8 by task ip/17681 <...> Allocated by task 17681: <...> ibmvnic_login+0x2f0/0xffc [ibmvnic] ibmvnic_open+0x148/0x308 [ibmvnic] __dev_open+0x1ac/0x304 <...> The buggy address is located 168 bytes inside of allocated 175-byte region [c0000001331a9a00, c0000001331a9aaf) <...> ================================================================= ibmvnic 30000003 env3: 000000000033766e

Quoted source text, attributed separately from HOL analysis.