CVE Database›Document archive›CVE-2025-38197

CVE-2025-38197

kernel: platform/x86: dell_rbu: Fix list usage

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · July 4, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: dell_rbu: Fix list usage

Pass the correct list head to list_for_each_entry*() when looping through the packet list.

Without this patch, reading the packet data via sysfs will show the data incorrectly (because it starts at the wrong packet), and clearing the packet list will result in a NULL pointer dereference.

Statement

This vulnerability is rated as Moderate impact because triggering the defect requires local access to interact with sysfs interfaces, restricting the potential harm to a denial of service through a system crash rather than arbitrary execution or information disclosure. The affected dell_rbu driver is specific to Dell hardware and is not required for standard operations. Systems running on other vendor hardware or environments where the module is not loaded are unaffected by this flaw.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference