CVE-2025-23146

mfd: ene-kb3930: Fix a potential NULL pointer dereference

State: Published
Severity: Not scored
Published: May 1, 2025
Updated: May 11, 2026
Reserved: Jan 11, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mfd: ene-kb3930: Fix a potential NULL pointer dereference

The off_gpios could be NULL. Add missing check in the kb3930_probe(). This is similar to the issue fixed in commit b1ba8bcb2d1f ("backlight: hx8357: Fix potential NULL pointer dereference").

This was detected by our static analysis tool.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 6dc88993ee3fa8365ff6a5d6514702f70ba6863aAffected ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 90ee23c2514a22a9c2bb39a540cbe1c9acb27d0bAffected ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 2edb5b29b197d90b4d08cd45e911c0bcf24cb895Affected ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before ea07760676bba49319d553af80c239da053b5fb1Affected ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 7b47df6498f223c8956bfe0d994a0e42a520dfcdAffected ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before b1758417310d2cc77e52cd15103497e52e2614f6Affected ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 76d0f4199bc5b51acb7b96c6663a8953543733adAffected ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 4cdf1d2a816a93fa02f7b6b5492dc7f55af2a199Affected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.237 through 5.10.Not affected 5.15.181 through 5.15.Not affected 6.1.135 through 6.1.Not affected 6.6.88 through 6.6.Not affected 6.12.24 through 6.12.Not affected 6.13.12 through 6.13.Not affected 6.14.3 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 6dc88993ee3fa8365ff6a5d6514702f70ba6863aAffected
ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 90ee23c2514a22a9c2bb39a540cbe1c9acb27d0bAffected
ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 2edb5b29b197d90b4d08cd45e911c0bcf24cb895Affected
ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before ea07760676bba49319d553af80c239da053b5fb1Affected
ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 7b47df6498f223c8956bfe0d994a0e42a520dfcdAffected
ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before b1758417310d2cc77e52cd15103497e52e2614f6Affected
ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 76d0f4199bc5b51acb7b96c6663a8953543733adAffected
ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad to before 4cdf1d2a816a93fa02f7b6b5492dc7f55af2a199Affected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.237 through 5.10.*Not affected
5.15.181 through 5.15.*Not affected
6.1.135 through 6.1.*Not affected
6.6.88 through 6.6.*Not affected
6.12.24 through 6.12.*Not affected
6.13.12 through 6.13.*Not affected
6.14.3 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.