CVE-2025-38412

CVE-2025-38412

High · published July 25, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks

After retrieving WMI data blocks in sysfs callbacks, check for the

validity of them before dereferencing their content.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00187 · 7.9th percentile
Published
2025-07-25T18:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.11, < 5.15.1875.15.187
linux/linux_kernel≥ 5.16, < 6.1.1446.1.144
linux/linux_kernel≥ 6.2, < 6.6.976.6.97
linux/linux_kernel≥ 6.7, < 6.12.376.12.37
linux/linux_kernel≥ 6.13, < 6.15.66.15.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (7)
https://git.kernel.org/stable/c/0deb3eb78ebf225cb41aa9b2b2150f46cbfd359e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5df3b870bc389a1767c72448a3ce1c576ef4deab · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/68e9963583d11963ceca5d276e9c44684509f759 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/92c2d914b5337431d885597a79a3a3d9d55e80b7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/aaf847dcb4114fe8b25d4c1c790bedcb6088cb3d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/eb617dd25ca176f3fee24f873f0fd60010773d67 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 25 JUL 13:20Z
    platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
    cvelistv5