CVE-2025-38092

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38092
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use list_first_entry_or_null for opinfo_get_list() The list_first_entry() macro never returns NULL. If the list is empty then it returns an invalid pointer. Use list_first_entry_or_null() to check if the list is empty.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/10379171f346e6f61d30d9949500a8de4336444a Patch
https://git.kernel.org/stable/c/334da674b25fdb7a1a4d4b89dcd7795144fc7e11 Patch
https://git.kernel.org/stable/c/c78abb646ff823e7d22faad4cc0703d4484da9e8 Patch
https://git.kernel.org/stable/c/cb7e06e9736d73007dc8dab7b353733bb37df86b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc7:*:*:*:*:*:*
History

20 Nov 2025, 21:58

Type Values Removed Values Added
CWE CWE-476
References () https://git.kernel.org/stable/c/10379171f346e6f61d30d9949500a8de4336444a - () https://git.kernel.org/stable/c/10379171f346e6f61d30d9949500a8de4336444a - Patch
References () https://git.kernel.org/stable/c/334da674b25fdb7a1a4d4b89dcd7795144fc7e11 - () https://git.kernel.org/stable/c/334da674b25fdb7a1a4d4b89dcd7795144fc7e11 - Patch
References () https://git.kernel.org/stable/c/c78abb646ff823e7d22faad4cc0703d4484da9e8 - () https://git.kernel.org/stable/c/c78abb646ff823e7d22faad4cc0703d4484da9e8 - Patch
References () https://git.kernel.org/stable/c/cb7e06e9736d73007dc8dab7b353733bb37df86b - () https://git.kernel.org/stable/c/cb7e06e9736d73007dc8dab7b353733bb37df86b - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc7:*:*:*:*:*:*

03 Jul 2025, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: usar list_first_entry_or_null para opinfo_get_list(). La macro list_first_entry() nunca devuelve NULL. Si la lista está vacía, devuelve un puntero no válido. Use list_first_entry_or_null() para comprobar si la lista está vacía.

02 Jul 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-02 15:15

Updated : 2025-11-20 21:58

NVD link : CVE-2025-38092

Mitre link : CVE-2025-38092

CVE.ORG link : CVE-2025-38092

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference