CVE-2025-38197

platform/x86: dell_rbu: Fix list usage

State: Published
Severity: 7.3 High
Published: Jul 4, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: dell_rbu: Fix list usage

Pass the correct list head to list_for_each_entry*() when looping through the packet list.

Without this patch, reading the packet data via sysfs will show the data incorrectly (because it starts at the wrong packet), and clearing the packet list will result in a NULL pointer dereference.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 5e8c658acd1b7c186aeffa46bf08795e121f401aAffected d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 07d7b8e7ef7d1f812a6211ed531947c56d09e95eAffected d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before a7b477b64ef5e37cb08dd536ae07c46f9f28262eAffected d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before f3b840fb1508a80cd8a0efb5c886ae1995a88b24Affected d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 4d71f2c1e5263a9f042faa71d59515709869dc79Affected d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 32d05e6cc3a7bf6c8f16f7b7ef8fe80eca0c233eAffected d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 61ce04601e0d8265ec6d2ffa6df5a7e1bce64854Affected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.239 through 5.10.Not affected 5.15.186 through 5.15.Not affected 6.1.142 through 6.1.Not affected 6.6.95 through 6.6.Not affected 6.12.35 through 6.12.Not affected 6.15.4 through 6.15.Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 5e8c658acd1b7c186aeffa46bf08795e121f401aAffected
d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 07d7b8e7ef7d1f812a6211ed531947c56d09e95eAffected
d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before a7b477b64ef5e37cb08dd536ae07c46f9f28262eAffected
d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before f3b840fb1508a80cd8a0efb5c886ae1995a88b24Affected
d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 4d71f2c1e5263a9f042faa71d59515709869dc79Affected
d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 32d05e6cc3a7bf6c8f16f7b7ef8fe80eca0c233eAffected
d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 61ce04601e0d8265ec6d2ffa6df5a7e1bce64854Affected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.239 through 5.10.*Not affected
5.15.186 through 5.15.*Not affected
6.1.142 through 6.1.*Not affected
6.6.95 through 6.6.*Not affected
6.12.35 through 6.12.*Not affected
6.15.4 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.