github - ghsa-7fhw-47q5-mgv8

ghsa-7fhw-47q5-mgv8

Vulnerability from github

Published

2025-07-25 15:30

Modified

2025-07-25 15:30

Details

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks

After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-38412"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-07-25T14:15:32Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks\n\nAfter retrieving WMI data blocks in sysfs callbacks, check for the\nvalidity of them before dereferencing their content.",
  "id": "GHSA-7fhw-47q5-mgv8",
  "modified": "2025-07-25T15:30:53Z",
  "published": "2025-07-25T15:30:53Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-38412"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/0deb3eb78ebf225cb41aa9b2b2150f46cbfd359e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/5df3b870bc389a1767c72448a3ce1c576ef4deab"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/68e9963583d11963ceca5d276e9c44684509f759"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/92c2d914b5337431d885597a79a3a3d9d55e80b7"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/aaf847dcb4114fe8b25d4c1c790bedcb6088cb3d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/eb617dd25ca176f3fee24f873f0fd60010773d67"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2025-38412 (GCVE-0-2025-38412)

Vulnerability from cvelistv5

Published

2025-07-25 13:20

Modified

2025-07-28 04:21

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content.

References

▼	URL	Tags
	https://git.kernel.org/stable/c/92c2d914b5337431d885597a79a3a3d9d55e80b7
	https://git.kernel.org/stable/c/68e9963583d11963ceca5d276e9c44684509f759
	https://git.kernel.org/stable/c/0deb3eb78ebf225cb41aa9b2b2150f46cbfd359e
	https://git.kernel.org/stable/c/5df3b870bc389a1767c72448a3ce1c576ef4deab
	https://git.kernel.org/stable/c/aaf847dcb4114fe8b25d4c1c790bedcb6088cb3d
	https://git.kernel.org/stable/c/eb617dd25ca176f3fee24f873f0fd60010773d67

Impacted products

Vendor

Product

Version

▼

Linux

Version: e8a60aa7404bfef37705da5607c97737073ac38d
Version: e8a60aa7404bfef37705da5607c97737073ac38d
Version: e8a60aa7404bfef37705da5607c97737073ac38d
Version: e8a60aa7404bfef37705da5607c97737073ac38d
Version: e8a60aa7404bfef37705da5607c97737073ac38d
Version: e8a60aa7404bfef37705da5607c97737073ac38d

Linux

Version: 5.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/platform/x86/dell/dell-wmi-sysman/dell-wmi-sysman.h",
            "drivers/platform/x86/dell/dell-wmi-sysman/enum-attributes.c",
            "drivers/platform/x86/dell/dell-wmi-sysman/int-attributes.c",
            "drivers/platform/x86/dell/dell-wmi-sysman/passobj-attributes.c",
            "drivers/platform/x86/dell/dell-wmi-sysman/string-attributes.c",
            "drivers/platform/x86/dell/dell-wmi-sysman/sysman.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "92c2d914b5337431d885597a79a3a3d9d55e80b7",
              "status": "affected",
              "version": "e8a60aa7404bfef37705da5607c97737073ac38d",
              "versionType": "git"
            },
            {
              "lessThan": "68e9963583d11963ceca5d276e9c44684509f759",
              "status": "affected",
              "version": "e8a60aa7404bfef37705da5607c97737073ac38d",
              "versionType": "git"
            },
            {
              "lessThan": "0deb3eb78ebf225cb41aa9b2b2150f46cbfd359e",
              "status": "affected",
              "version": "e8a60aa7404bfef37705da5607c97737073ac38d",
              "versionType": "git"
            },
            {
              "lessThan": "5df3b870bc389a1767c72448a3ce1c576ef4deab",
              "status": "affected",
              "version": "e8a60aa7404bfef37705da5607c97737073ac38d",
              "versionType": "git"
            },
            {
              "lessThan": "aaf847dcb4114fe8b25d4c1c790bedcb6088cb3d",
              "status": "affected",
              "version": "e8a60aa7404bfef37705da5607c97737073ac38d",
              "versionType": "git"
            },
            {
              "lessThan": "eb617dd25ca176f3fee24f873f0fd60010773d67",
              "status": "affected",
              "version": "e8a60aa7404bfef37705da5607c97737073ac38d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/platform/x86/dell/dell-wmi-sysman/dell-wmi-sysman.h",
            "drivers/platform/x86/dell/dell-wmi-sysman/enum-attributes.c",
            "drivers/platform/x86/dell/dell-wmi-sysman/int-attributes.c",
            "drivers/platform/x86/dell/dell-wmi-sysman/passobj-attributes.c",
            "drivers/platform/x86/dell/dell-wmi-sysman/string-attributes.c",
            "drivers/platform/x86/dell/dell-wmi-sysman/sysman.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.11"
            },
            {
              "lessThan": "5.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.187",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.144",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.37",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.15.*",
              "status": "unaffected",
              "version": "6.15.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.187",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.144",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.97",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.37",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15.6",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks\n\nAfter retrieving WMI data blocks in sysfs callbacks, check for the\nvalidity of them before dereferencing their content."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-28T04:21:25.343Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/92c2d914b5337431d885597a79a3a3d9d55e80b7"
        },
        {
          "url": "https://git.kernel.org/stable/c/68e9963583d11963ceca5d276e9c44684509f759"
        },
        {
          "url": "https://git.kernel.org/stable/c/0deb3eb78ebf225cb41aa9b2b2150f46cbfd359e"
        },
        {
          "url": "https://git.kernel.org/stable/c/5df3b870bc389a1767c72448a3ce1c576ef4deab"
        },
        {
          "url": "https://git.kernel.org/stable/c/aaf847dcb4114fe8b25d4c1c790bedcb6088cb3d"
        },
        {
          "url": "https://git.kernel.org/stable/c/eb617dd25ca176f3fee24f873f0fd60010773d67"
        }
      ],
      "title": "platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38412",
    "datePublished": "2025-07-25T13:20:16.688Z",
    "dateReserved": "2025-04-16T04:51:24.013Z",
    "dateUpdated": "2025-07-28T04:21:25.343Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted