Improper List Management in Linux Kernel Affects System Stability

CVE-2025-38197

What is CVE-2025-38197?

This vulnerability within the Linux kernel stems from improper handling of list data structures in the dell_rbu component. The issue arises when the incorrect list head is provided during packet list traversal, leading to inaccurate reading of packet data via sysfs. This mismanagement can cause erroneous data to be displayed, as it starts reading from the wrong packet. Moreover, attempts to clear the packet list may result in a NULL pointer dereference, potentially compromising system stability. It is crucial for users to implement the provided patch to rectify this vulnerability and ensure the integrity of their systems.

References