CVE-2025-38197: platform/x86: dell_rbu: Fix list usage
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: dellrbu: Fix list usage
Pass the correct list head to listforeachentry() when looping through the packet list.
Without this patch, reading the packet data via sysfs will show the data incorrectly (because it starts at the wrong packet), and clearing the packet list will result in a NULL pointer dereference.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38197?
CVE-2025-38197 has been classified as a moderate severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-38197?
To fix CVE-2025-38197, apply the latest patches provided for the Linux kernel that address the issue with list head usage.
What systems are affected by CVE-2025-38197?
CVE-2025-38197 affects multiple versions of the Linux kernel that utilize the specified functionality in platform/x86.
What specific issue does CVE-2025-38197 address?
CVE-2025-38197 addresses incorrect usage of list_for_each_entry*() when processing packet data in the Linux kernel.
Is there a public exploit available for CVE-2025-38197?
As of now, there are no known public exploits for CVE-2025-38197.