Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38381

Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() The cs40l50_upload_owt() function allocates memory via kmalloc() without checking for allocation failure, which could lead to a NULL pointer dereference. Return -ENOMEM in case allocation fails.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c38fe1bb5d21c2ce0857965ee06174ee587d6b42 to < ea20568895c1122f15b6fc9e8d02c6cbe22964f8affected
  • c38fe1bb5d21c2ce0857965ee06174ee587d6b42 to < e87fc697fa4be5164e47cfba4ddd4732499adc60affected
  • c38fe1bb5d21c2ce0857965ee06174ee587d6b42 to < 4cf65845fdd09d711fc7546d60c9abe010956922affected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 6.12.37 to ≤ 6.12.*unaffected
  • 6.15.6 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References