CVE-2025-38092: ksmbd: use list_first_entry_or_null for opinfo_get_list()
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: use listfirstentryornull for opinfogetlist()
The listfirstentry() macro never returns NULL. If the list is empty then it returns an invalid pointer. Use listfirstentryornull() to check if the list is empty.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update code to use list_first_entry_or_null() instead of list_first_entry() so that when the list is empty it returns NULL (not an invalid pointer).
Linux kernel list_first_entry() macro usage = Replace list_first_entry() with list_first_entry_or_null()
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38092?
CVE-2025-38092 is classified as a medium severity vulnerability due to its potential impact on system stability.
How do I fix CVE-2025-38092?
To fix CVE-2025-38092, update your Linux kernel to the latest version where this vulnerability is resolved.
What systems are affected by CVE-2025-38092?
CVE-2025-38092 affects the Linux kernel, specifically versions prior to the security fix.
What type of vulnerability is CVE-2025-38092?
CVE-2025-38092 is a programming flaw in the Linux kernel's ksmbd component related to list handling.
When was CVE-2025-38092 reported?
CVE-2025-38092 was reported and documented in 2025.