CVE-2025-38092

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: use list_first_entry_or_null for opinfo_get_list()

The list_first_entry() macro never returns NULL. If the list is empty then it returns an invalid pointer. Use list_first_entry_or_null() to check if the list is empty.

This vulnerability does not impact Red Hat Enterprise Linux, as the in-kernel SMB server (ksmbd) is not enabled and the vulnerable code is not present in supported kernel packages. The flaw stems from improper handling of empty list pointers in upstream kernel releases, which could lead to system instability under specific SMB file-sharing operations. Because Red Hat relies on user-space implementations such as Samba for SMB file serving, production environments running supported Red Hat distributions remain unaffected.