CVE-2025-38077: platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: dell-wmi-sysman: Avoid buffer overflow in currentpasswordstore()
If the 'buf' array received from the user contains an empty string, the 'length' variable will be zero. Accessing the 'buf' array element with index 'length - 1' will result in a buffer overflow.
Add a check for an empty string.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38077?
CVE-2025-38077 has been categorized as a high severity vulnerability.
How do I fix CVE-2025-38077?
Fixing CVE-2025-38077 involves updating the Linux kernel to the latest patched version.
What systems are affected by CVE-2025-38077?
CVE-2025-38077 affects various versions of the Linux kernel that utilize the dell-wmi-sysman module.
What type of vulnerability is CVE-2025-38077?
CVE-2025-38077 is a buffer overflow vulnerability in the Linux kernel.
What does CVE-2025-38077 impact in the Linux kernel?
CVE-2025-38077 impacts the current_password_store() function in the Linux kernel, leading to potential security risks.