Search/CVE-2025-38426
● CVE — Medium

CVE-2025-38426

VendorlinuxProductlinux kernelDiscoveredJul 25, 2025UpdatedMar 25, 2026

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add basic validation for RAS header If RAS header read from EEPROM is corrupted, it could result in trying to allocate huge memory for reading the records. Add some validation to header fields.

View graph Watch Export
CVSS v3.1
5.5 MEDIUM
EPSS
0.19%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
20
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 27, 2026
▲ 0.03pp
0.16% → 0.19% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Connections
21 relationships
Timeline
disclosure → media coverage
Jul 25, 2025
Disclosure — published as a CVE record. · last revised by NVD Mar 25, 2026
Oct 21, 2025
ubuntu.com reports: USN-7833-1: Linux kernel vulnerabilities
Oct 22, 2025
ubuntu.com reports: USN-7834-1: Linux kernel (Azure) vulnerabilities
Oct 22, 2025
ubuntu.com reports: USN-7833-2: Linux kernel (Real-time) vulnerabilities
Oct 24, 2025
ubuntu.com reports: USN-7833-3: Linux kernel (AWS) vulnerabilities
Oct 31, 2025
ubuntu.com reports: USN-7833-4: Linux kernel (GCP) vulnerabilities
Nov 4, 2025
ubuntu.com reports: USN-7856-1: Linux kernel (HWE) vulnerabilities
Jul 20, 2026
ubuntu.com reports: USN-8567-1: Linux kernel vulnerabilities
Jul 21, 2026
ubuntu.com reports: USN-8574-1: Linux kernel (GCP FIPS) vulnerabilities
Jul 23, 2026
ubuntu.com reports: USN-8574-2: Linux kernel vulnerabilities
Jul 23, 2026
ubuntu.com reports: USN-8595-1: Linux kernel (Oracle) vulnerabilities
Jul 23, 2026
ubuntu.com reports: USN-8596-1: Linux kernel (NVIDIA) vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8595-2: Linux kernel (AWS) vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8606-1: Linux kernel (Azure) vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8607-1: Linux kernel (Azure CVM) vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8608-1: Linux kernel (Azure FIPS) vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8609-1: Linux kernel (Azure CVM) vulnerabilities
Jul 28, 2026
ubuntu.com reports: USN-8574-3: Linux kernel vulnerabilities
Jul 28, 2026
ubuntu.com reports: USN-8595-3: Linux kernel (AWS) vulnerabilities
Jul 28, 2026
ubuntu.com reports: USN-8619-1: Linux kernel (HWE) vulnerabilities
Aug 20, 2026
ubuntu.com reports: USN-8665-1: Linux kernel (Raspberry Pi) vulnerabilities