CVE-2025-21982

pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw

State: Published
Severity: 5.5 Medium
Published: Apr 1, 2025
Updated: May 11, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw

devm_kasprintf() calls can return null pointers on failure. But the return values were not checked in npcm8xx_gpio_fw(). Add NULL check in npcm8xx_gpio_fw(), to handle kernel NULL pointer dereference error.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	acf4884a571709cad99f98aabe08b7cacd62dc80 to before a585f6ea42ec259a9a57e3e2580fa527c92187d0Affected acf4884a571709cad99f98aabe08b7cacd62dc80 to before 6a08a86e5aff8e65368ccd463348fdda26100821Affected acf4884a571709cad99f98aabe08b7cacd62dc80 to before acf40ab42799e4ae1397ee6f5c5941092d66f999Affected
LinuxLinux	6.7Affected before 6.7Not affected 6.12.20 through 6.12.Not affected 6.13.8 through 6.13.Not affected 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.