CVE-2025-38145

soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()

State: Published
Severity: Not scored
Published: Jul 3, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()

devm_kasprintf() returns NULL when memory allocation fails. Currently, aspeed_lpc_enable_snoop() does not check for this case, which results in a NULL pointer dereference.

Add NULL check after devm_kasprintf() to prevent this issue.

[arj: Fix Fixes: tag to use subject from 3772e5da4454]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3772e5da445420543b25825ac2b5971f3743f6e8 to before 2beee9cf833374550e673d428ad8b6ab37c175b3Affected 3772e5da445420543b25825ac2b5971f3743f6e8 to before c550999f939b529d28a914d5034cc4290066aea6Affected 3772e5da445420543b25825ac2b5971f3743f6e8 to before 1fd889c145722579aa038c31cbc07cfdd4d75166Affected 3772e5da445420543b25825ac2b5971f3743f6e8 to before d62a589eaaec6385e3e2b25cf5a28b4560ace93fAffected 3772e5da445420543b25825ac2b5971f3743f6e8 to before 8312b1f776f71979bf33bda7acc05b348e8792c7Affected 3772e5da445420543b25825ac2b5971f3743f6e8 to before f697ef117ecbf3a367dfc559a6a3589905956530Affected 3772e5da445420543b25825ac2b5971f3743f6e8 to before 45b2e8b0fdd280aba04c3cc869e9ae500c44e4b7Affected 3772e5da445420543b25825ac2b5971f3743f6e8 to before f1706e0e1a74b095cbc60375b9b1e6205f5f4c98Affected
LinuxLinux	4.19Affected before 4.19Not affected 5.4.295 through 5.4.Not affected 5.10.239 through 5.10.Not affected 5.15.186 through 5.15.Not affected 6.1.142 through 6.1.Not affected 6.6.94 through 6.6.Not affected 6.12.34 through 6.12.Not affected 6.15.3 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

3772e5da445420543b25825ac2b5971f3743f6e8 to before 2beee9cf833374550e673d428ad8b6ab37c175b3Affected
3772e5da445420543b25825ac2b5971f3743f6e8 to before c550999f939b529d28a914d5034cc4290066aea6Affected
3772e5da445420543b25825ac2b5971f3743f6e8 to before 1fd889c145722579aa038c31cbc07cfdd4d75166Affected
3772e5da445420543b25825ac2b5971f3743f6e8 to before d62a589eaaec6385e3e2b25cf5a28b4560ace93fAffected
3772e5da445420543b25825ac2b5971f3743f6e8 to before 8312b1f776f71979bf33bda7acc05b348e8792c7Affected
3772e5da445420543b25825ac2b5971f3743f6e8 to before f697ef117ecbf3a367dfc559a6a3589905956530Affected
3772e5da445420543b25825ac2b5971f3743f6e8 to before 45b2e8b0fdd280aba04c3cc869e9ae500c44e4b7Affected
3772e5da445420543b25825ac2b5971f3743f6e8 to before f1706e0e1a74b095cbc60375b9b1e6205f5f4c98Affected

LinuxLinux

4.19Affected
before 4.19Not affected
5.4.295 through 5.4.*Not affected
5.10.239 through 5.10.*Not affected
5.15.186 through 5.15.*Not affected
6.1.142 through 6.1.*Not affected
6.6.94 through 6.6.*Not affected
6.12.34 through 6.12.*Not affected
6.15.3 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.