ByteOS Network

NVD Vulnerability Details :

CVE-2025-38412

Analyzed

Source-416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published At-25 Jul, 2025 | 14:15

Updated At-23 Dec, 2025 | 18:47

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 5.11(inclusive) to 5.15.187(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 5.16(inclusive) to 6.1.144(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 6.2(inclusive) to 6.6.97(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 6.7(inclusive) to 6.12.37(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 6.13(inclusive) to 6.15.6(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>6.16

cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>6.16

cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>6.16

cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>6.16

cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>11.0

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://git.kernel.org/stable/c/0deb3eb78ebf225cb41aa9b2b2150f46cbfd359e	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/5df3b870bc389a1767c72448a3ce1c576ef4deab	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/68e9963583d11963ceca5d276e9c44684509f759	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/92c2d914b5337431d885597a79a3a3d9d55e80b7	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/aaf847dcb4114fe8b25d4c1c790bedcb6088cb3d	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/eb617dd25ca176f3fee24f873f0fd60010773d67	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory Mailing List