Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-38573

spi: cs42l43: Property entry should be a null-terminated array

Description

In the Linux kernel, the following vulnerability has been resolved: spi: cs42l43: Property entry should be a null-terminated array The software node does not specify a count of property entries, so the array must be null-terminated. When unterminated, this can lead to a fault in the downstream cs35l56 amplifier driver, because the node parse walks off the end of the array into unknown memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0ca645ab5b1528666f6662a0e620140355b5aea3 to < 674328102baad76c7a06628efc01974ece5ae27faffected
  • 0ca645ab5b1528666f6662a0e620140355b5aea3 to < 9f0035ae38d2571f5ddedc829d74492013caa625affected
  • 0ca645ab5b1528666f6662a0e620140355b5aea3 to < 139b5df757a0aa436f763b0038e0b73808d2f4b6affected
  • 0ca645ab5b1528666f6662a0e620140355b5aea3 to < ffcfd071eec7973e58c4ffff7da4cb0e9ca7b667affected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 6.12.42 to ≤ 6.12.*unaffected
  • 6.15.10 to ≤ 6.15.*unaffected
  • 6.16.1 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References