PT-2025-29016 · Linux+3 · Linux Kernel+3

Published 2025-05-22 · Updated 2025-12-03 · CVE-2025-38296

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions:

Linux kernel versions 6.15.0-rc7 and earlier

Description:

The platform profile driver in the Linux kernel is loaded even on platforms without ACPI enabled. The initialization of sysfs entries was moved to the module init call, requiring acpi kobj to be initialized, which is not the case when ACPI is disabled. This results in a warning during system operation.

Recommendations:

Linux kernel versions prior to 6.15.0: Ensure ACPI is enabled before attempting to create sysfs entries.

Exploit

Fix

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

BDU:2025-08624

CVE-2025-38296

USN-7769-1

USN-7769-2

USN-7769-3

USN-7770-1

USN-7771-1

USN-7789-1

USN-7789-2

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 213

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38296.json · Exploit
• https://ubuntu.com/security/CVE-2025-38120 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38163 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38103 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38062 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38003 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38272 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38295 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38004 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38068 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38102 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38291 · Vendor Advisory