{"id":"CVE-2025-38412","revision":"8786357e2ff9443f90171b46bc711cc7","records":[{"revision":"8786357e2ff9443f90171b46bc711cc7","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-38412","aliases":[],"title":"platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks\n\nAfter retrieving WMI data blocks in sysfs callbacks, check for the\nvalidity of them before dereferencing their content.","state":0,"publishedAt":"2025-07-25T13:20:16.688+00:00","modifiedAt":"2026-10-15T21:52:15.661+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/dell-wmi-sysman.h\",\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/enum-attributes.c\",\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/int-attributes.c\",\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/passobj-attributes.c\",\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/string-attributes.c\",\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/sysman.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"e8a60aa7404bfef37705da5607c97737073ac38d\",\n                            \"lessThan\": \"92c2d914b5337431d885597a79a3a3d9d55e80b7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e8a60aa7404bfef37705da5607c97737073ac38d\",\n                            \"lessThan\": \"68e9963583d11963ceca5d276e9c44684509f759\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e8a60aa7404bfef37705da5607c97737073ac38d\",\n                            \"lessThan\": \"0deb3eb78ebf225cb41aa9b2b2150f46cbfd359e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e8a60aa7404bfef37705da5607c97737073ac38d\",\n                            \"lessThan\": \"5df3b870bc389a1767c72448a3ce1c576ef4deab\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e8a60aa7404bfef37705da5607c97737073ac38d\",\n                            \"lessThan\": \"aaf847dcb4114fe8b25d4c1c790bedcb6088cb3d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e8a60aa7404bfef37705da5607c97737073ac38d\",\n                            \"lessThan\": \"eb617dd25ca176f3fee24f873f0fd60010773d67\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/dell-wmi-sysman.h\",\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/enum-attributes.c\",\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/int-attributes.c\",\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/passobj-attributes.c\",\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/string-attributes.c\",\n                        \"drivers/platform/x86/dell/dell-wmi-sysman/sysman.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.11\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.11\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.187\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.144\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.97\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.37\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.15.6\",\n                            \"lessThanOrEqual\": \"6.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.16\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/92c2d914b5337431d885597a79a3a3d9d55e80b7","https://git.kernel.org/stable/c/68e9963583d11963ceca5d276e9c44684509f759","https://git.kernel.org/stable/c/0deb3eb78ebf225cb41aa9b2b2150f46cbfd359e","https://git.kernel.org/stable/c/5df3b870bc389a1767c72448a3ce1c576ef4deab","https://git.kernel.org/stable/c/aaf847dcb4114fe8b25d4c1c790bedcb6088cb3d","https://git.kernel.org/stable/c/eb617dd25ca176f3fee24f873f0fd60010773d67"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38412","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-38412","identifiers":["CVE-2025-38412"]},"retained":false,"historicalAffected":[]}],"coverage":[]}