Riskcovery

CVE-2025-38381

Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()

State
Published
Severity
Not scored
Published
Jul 25, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()

The cs40l50_upload_owt() function allocates memory via kmalloc() without checking for allocation failure, which could lead to a NULL pointer dereference.

Return -ENOMEM in case allocation fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c38fe1bb5d21c2ce0857965ee06174ee587d6b42 to before ea20568895c1122f15b6fc9e8d02c6cbe22964f8Affected
  • c38fe1bb5d21c2ce0857965ee06174ee587d6b42 to before e87fc697fa4be5164e47cfba4ddd4732499adc60Affected
  • c38fe1bb5d21c2ce0857965ee06174ee587d6b42 to before 4cf65845fdd09d711fc7546d60c9abe010956922Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.37 through 6.12.*Not affected
  • 6.15.6 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.