CVE-2025-38412: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In platform/x86/dell-wmi-sysman sysfs callbacks, validate the retrieved WMI data blocks before dereferencing their contents.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38412?
CVE-2025-38412 has been classified as a medium severity vulnerability.
How do I fix CVE-2025-38412?
To resolve CVE-2025-38412, you should update your Linux kernel to the latest patched version.
What systems are affected by CVE-2025-38412?
CVE-2025-38412 affects various versions of the Linux kernel that utilize dell-wmi-sysman.
What type of vulnerability is CVE-2025-38412?
CVE-2025-38412 is a security vulnerability in the Linux kernel related to improper validation of WMI data blocks.
Can CVE-2025-38412 be exploited remotely?
CVE-2025-38412 may allow local attackers to exploit the vulnerability, but it is not known to be exploitable remotely.