CVE-2025-38210

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A NULL dereference of tsm ops in the configfs-tsm-report mechanism has been fixed. The issue arises because the lifetime of configfs objects is controlled by userspace, and there is no mechanism for the kernel to find and delete all created config-items. The configfs-tsm-report mechanism expects that tsm unregister() can happen at any time, causing established config-item access to start failing. However, some functions, such as tsm report privlevel store() and tsm report provider show(), failed to check for ops registration, leading to potential issues. The fix adds missing checks for tsm ops having been removed.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.