Buffer Overflow Vulnerability in Dell WMI Sysman for Linux Kernel

CVE-2025-38077

What is CVE-2025-38077?

A buffer overflow vulnerability exists in the Dell WMI Sysman component of the Linux kernel. This vulnerability occurs when an empty string is passed as input. The resulting zero-length 'length' variable leads to an attempt to access an out-of-bounds element of the 'buf' array, which can compromise the integrity of the system. As a mitigation, a check for empty strings has been implemented to prevent this scenario. The issue was identified by the Linux Verification Center.

References