CVE-2025-22003

Summary

CVE-2025-22003 is a vulnerability affecting the Linux kernel where an out-of-bound read issue was discovered in the use of the strscpy() function in the ucan subsystem. The issue occurred due to a commit that unintentionally introduced this vulnerability while attempting to improve security by using strscpy() instead of strncpy(). The src buffer, which was not guaranteed to be null-terminated, caused an out-of-bound read when strscpy() read past the intended length. To mitigate this, the source should be null-terminated as soon as it is obtained, and some refactoring, such as renaming and refactoring ucan_ctl_payload->raw to ucan_ctl_payload->fw_str and changing its type to char, and renaming and refactoring ucan_device_request_in() to ucan_get_fw_str() and handling all string termination logic directly, is recommended.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.