PT-2025-27985 · Linux+5 · Linux Kernel+5
Published
2025-04-30
·
Updated
2026-04-20
·
CVE-2025-38210
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A NULL dereference of tsm ops in the configfs-tsm-report mechanism has been fixed. The issue arises because the lifetime of configfs objects is controlled by userspace, and there is no mechanism for the kernel to find and delete all created config-items. The configfs-tsm-report mechanism expects that tsm unregister() can happen at any time, causing established config-item access to start failing. However, some functions, such as tsm report privlevel store() and tsm report provider show(), failed to check for ops registration, leading to potential issues. The fix adds missing checks for tsm ops having been removed.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Resource Release
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu