CVE-2025-38077

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow issue has been identified in the Linux kernel, specifically in the dell-wmi-sysman platform, within the current password store() function. This occurs when the buf array, received from the user, contains an empty string, causing the length variable to be zero. As a result, accessing the buf array element with index length - 1 leads to a buffer overflow. The issue was discovered by the Linux Verification Center with SVACE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.