CVE-2025-38077

A flaw was found in the Linux kernel. A local attacker with low privileges could exploit a buffer overflow vulnerability in the dell-wmi-sysman component's current_password_store() function. This occurs when an empty string is provided as input, leading to an out-of-bounds write. Successful exploitation could result in a denial of service, information disclosure, or potentially arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.