Log in Start free

Vulnerability · Published Feb 4, 2026 · Assigned by Linux

CVE-2025-71197w1: therm: Fix off-by-one buffer overflow in alarms_store

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.3%top 82.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarms_store The sysfs buffer passed to alarms_store() is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byte. The original code then allocated 'size' bytes and used strcpy() to copy 'buf', which always writes one byte past the allocated buffer since strcpy() copies until the NUL terminator at index 'size'. Fix this by parsing the 'buf' parameter directly using simple_strtoll() without allocating any intermediate memory or string copying. This removes the overflow while simplifying the code.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.162-1DEBIAN-CVE-2025-71197
Debian:13linux6.12.69-1DEBIAN-CVE-2025-71197
Debian:14linux6.18.8-1DEBIAN-CVE-2025-71197
Ubuntu:22.04:LTSlinux5.15.0-176.186USN-8180-1
Ubuntu:22.04:LTSlinux5.15.0-176.186UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux6.8.0-117.117UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux6.8.0-117.117USN-8278-1
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-aws5.15.0-1105.112USN-8180-1
Ubuntu:22.04:LTSlinux-aws5.15.0-1105.112UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-aws6.8.0-1055.58UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-aws6.8.0-1055.58USN-8278-1
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1057.60~22.04.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-azure5.15.0-1110.119UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-azure5.15.0-1110.119USN-8180-3
Ubuntu:24.04:LTSlinux-azure6.8.0-1056.62USN-8278-2
Ubuntu:24.04:LTSlinux-azure6.8.0-1056.62UBUNTU-CVE-2025-71197
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1021.21~24.04.1UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1021.21~24.04.1USN-8604-1
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1059.65~22.04.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1114.123UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2025-71197
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-azure-fde-6.176.17.0-1018.18~24.04.1USN-8605-1
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-gcp5.15.0-1105.114UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-gcp5.15.0-1105.114USN-8180-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1058.61UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-gcp6.8.0-1058.61USN-8278-1
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1021.24~24.04.1USN-8570-1
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1021.24~24.04.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1060.63~22.04.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-gke5.15.0-1101.107UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-gke5.15.0-1101.107USN-8180-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1054.60USN-8278-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1054.60UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1088.96USN-8180-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1088.96UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1041.44USN-8278-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1041.44UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-41.41~24.04.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-124.124~22.04.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-ibm5.15.0-1099.102USN-8180-5
Ubuntu:22.04:LTSlinux-ibm5.15.0-1099.102UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-ibm6.8.0-1055.56UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-ibm6.8.0-1055.56USN-8278-1
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1055.56~22.04.1USN-8278-1
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1055.56~22.04.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1100.106UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1100.106USN-8180-3
Ubuntu:22.04:LTSlinux-kvm5.15.0-1097.102UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-kvm5.15.0-1097.102USN-8180-3
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-175.185UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-175.185USN-8180-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-117.117.1USN-8278-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-117.117.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-117.117.1~22.04.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-117.117.1~22.04.1USN-8278-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1100.101UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1100.101USN-8180-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1054.57UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1054.57USN-8289-1
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1031.31USN-8669-1
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1031.31UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1054.57~22.04.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1054.57~22.04.1USN-8289-2
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1054.57.1UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1054.57.1USN-8289-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1057.57USN-8187-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1057.57UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1024.24USN-8296-2
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1024.24UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1046.46UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1046.46USN-8187-1
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1030.30USN-8594-1
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1030.30UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-oracle5.15.0-1102.108UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-oracle5.15.0-1102.108USN-8180-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1054.55UBUNTU-CVE-2025-71197
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1019.19~24.04.3USN-8570-2
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1019.19~24.04.3UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1054.55~22.04.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-raspi5.15.0-1099.102UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-raspi5.15.0-1099.102USN-8180-6
Ubuntu:24.04:LTSlinux-raspi6.8.0-1056.60USN-8278-1
Ubuntu:24.04:LTSlinux-raspi6.8.0-1056.60UBUNTU-CVE-2025-71197
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71197
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71197
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-117.117~22.04.1UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1032.33UBUNTU-CVE-2025-71197
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1032.33USN-8499-1
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1070.74UBUNTU-CVE-2025-71197
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1070.74USN-8275-1

Affected products (as reported)

VendorProductVersions
Linux Linux e2c94d6f572079511945e64537eb1218643f2e68 – before 49ff9b4b9deacbefa6654a0a2bcaf910c9de7e95e2c94d6f572079511945e64537eb1218643f2e68 – before 060b08d72a38b158a7f850d4b83c17c2969e0f6be2c94d6f572079511945e64537eb1218643f2e68 – before b3fc3e1f04dcc7c41787bbf08a6e0d2728e022cfe2c94d6f572079511945e64537eb1218643f2e68 – before 6a5820ecfa5a76c3d3e154802c8c15f391ef442ee2c94d6f572079511945e64537eb1218643f2e68 – before 6fd6d2a8e41b7f544a4d26cbd60bedf9c67893a0e2c94d6f572079511945e64537eb1218643f2e68 – before e6b2609af21b5cccc9559339591b8a2cbf884169e2c94d6f572079511945e64537eb1218643f2e68 – before 761fcf46a1bd797bd32d23f3ea0141ffd437668a
Linux Linux 5.8

References