CVE-2025-38456

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the ipmi create user() function within the IPMI message handler. An invalid pointer in the "intf" list iterator can occur if the correct "intf->intf num" is not found, leading to potential memory corruption when calling atomic dec(&intf->nr users). The issue is related to the handling of interface shutdown and user reference counts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.