CVE-2025-38412

platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks

Published: 7/25/2025 Last updated: 11/3/2025 Reserved: 4/16/2025

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content.

CNA assigner: Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67) Requested by: n/a

Opam packages affected (27)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (2)

Product	Vendor	Version
Linux	Linux	< publication
Linux	Linux	9.14.2.13

References (14)

https://git.kernel.org/stable/c/92c2d914b5337431d885597a79a3a3d9d55e80b7
https://git.kernel.org/stable/c/68e9963583d11963ceca5d276e9c44684509f759
https://git.kernel.org/stable/c/0deb3eb78ebf225cb41aa9b2b2150f46cbfd359e
https://git.kernel.org/stable/c/5df3b870bc389a1767c72448a3ce1c576ef4deab
https://git.kernel.org/stable/c/aaf847dcb4114fe8b25d4c1c790bedcb6088cb3d
https://git.kernel.org/stable/c/eb617dd25ca176f3fee24f873f0fd60010773d67
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
https://git.kernel.org/stable/c/92c2d914b5337431d885597a79a3a3d9d55e80b7
https://git.kernel.org/stable/c/68e9963583d11963ceca5d276e9c44684509f759
https://git.kernel.org/stable/c/0deb3eb78ebf225cb41aa9b2b2150f46cbfd359e
https://git.kernel.org/stable/c/5df3b870bc389a1767c72448a3ce1c576ef4deab
https://git.kernel.org/stable/c/aaf847dcb4114fe8b25d4c1c790bedcb6088cb3d
https://git.kernel.org/stable/c/eb617dd25ca176f3fee24f873f0fd60010773d67
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html