CVE-2025-38197
kernel: platform/x86: dell_rbu: Fix list usage
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 4, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: dell_rbu: Fix list usage
Pass the correct list head to list_for_each_entry*() when looping through the packet list.
Without this patch, reading the packet data via sysfs will show the data incorrectly (because it starts at the wrong packet), and clearing the packet list will result in a NULL pointer dereference.
Statement
This vulnerability is rated as Moderate impact because triggering the defect requires local access to interact with sysfs interfaces, restricting the potential harm to a denial of service through a system crash rather than arbitrary execution or information disclosure. The affected dell_rbu driver is specific to Dell hardware and is not required for standard operations. Systems running on other vendor hardware or environments where the module is not loaded are unaffected by this flaw.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference