Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-40224

hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc() The driver allocates memory for sensor data using devm_kzalloc(), but did not check if the allocation succeeded. In case of memory allocation failure, dereferencing the NULL pointer would lead to a kernel crash. Add a NULL pointer check and return -ENOMEM to handle allocation failure properly.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 08ebc9def79fc0c4dbb6ecc39263006e3f98b750 to < 240b82b86a091c1aa49d951d4467425420a081a0affected
  • 08ebc9def79fc0c4dbb6ecc39263006e3f98b750 to < a09a5aa8bf258ddc99a22c30f17fe304b96b5350affected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.17.6 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References