Answer in brief
CVE-2025-38342 records a Unknown severity vulnerability in software node: Correct a OOB check in software_node_get_reference_args(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=59abd83672f70cac4b6bf9b237506c5bc6837606 <142acd739eb6f08c148a96ae8309256f1422ff4b || >=59abd83672f70cac4b6bf9b237506c5bc6837606 <56ce76e8d406cc72b89aee7931df5cf3f18db49d || >=59abd83672f70cac4b6bf9b237506c5bc6837606 <9324127b07dde8529222dc19233aa57ec810856c || >=59abd83672f70cac4b6bf9b237506c5bc6837606 <f9397cf7bfb680799fb8c7f717c8f756384c3280 || >=59abd83672f70cac4b6bf9b237506c5bc6837606 <4b3383110b6df48e0ba5936af2cb68d5eb6bd43b || >=59abd83672f70cac4b6bf9b237506c5bc6837606 <7af18e42bdefe1dba5bcb32555a4d524fd504939 || >=59abd83672f70cac4b6bf9b237506c5bc6837606 <31e4e12e0e9609850cefd4b2e1adf782f56337d6 | 142acd739eb6f08c148a96ae8309256f1422ff4b, 56ce76e8d406cc72b89aee7931df5cf3f18db49d, 9324127b07dde8529222dc19233aa57ec810856c, f9397cf7bfb680799fb8c7f717c8f756384c3280, 4b3383110b6df48e0ba5936af2cb68d5eb6bd43b, 7af18e42bdefe1dba5bcb32555a4d524fd504939, 31e4e12e0e9609850cefd4b2e1adf782f56337d6 |
| Linux/Linuxgeneric | 5.0 | Not reported |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.5 <* | * |
Published upstream
Jul 10, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args() software_node_get_reference_args() wants to get @index-th element, so the property value requires at least '(index + 1) * sizeof(*ref)' bytes but that can not be guaranteed by current OOB check, and may cause OOB for malformed property. Fix by using as OOB check '((index + 1) * sizeof(*ref) > prop->length)'.
Quoted source text, attributed separately from HOL analysis.