CVE-2025-38487

soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled

State: Published
Severity: Not scored
Published: Jul 28, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled

Mitigate e.g. the following:

# echo 1e789080.lpc-snoop > /sys/bus/platform/drivers/aspeed-lpc-snoop/unbind ... [ 120.363594] Unable to handle kernel NULL pointer dereference at virtual address 00000004 when write [ 120.373866] [00000004] *pgd=00000000 [ 120.377910] Internal error: Oops: 805 [#1] SMP ARM [ 120.383306] CPU: 1 UID: 0 PID: 315 Comm: sh Not tainted 6.15.0-rc1-00009-g926217bc7d7d-dirty #20 NONE ... [ 120.679543] Call trace: [ 120.679559] misc_deregister from aspeed_lpc_snoop_remove+0x84/0xac [ 120.692462] aspeed_lpc_snoop_remove from platform_remove+0x28/0x38 [ 120.700996] platform_remove from device_release_driver_internal+0x188/0x200 ...

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before 62e51f51d97477ea4e78c82e7076a171dac86c75Affected 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before 9e1d2b97f5e2a36a2fd30a8bd30ead9dac5e3a51Affected 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before 166afe964e8433d52c641f5d1c09102bacee9a92Affected 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before dc5598482e2d3b234f6d72d6f5568e24f603e51aAffected 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before 329a80adc0e5f815d0514a6d403aaaf0995cd9beAffected 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before b361598b7352f02456619a6105c7da952ef69f8fAffected 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before ac10ed9862104936a412f8b475c869e99f048448Affected 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before 56448e78a6bb4e1a8528a0e2efe94eff0400c247Affected
LinuxLinux	4.13Affected before 4.13Not affected 5.4.297 through 5.4.Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.147 through 6.1.Not affected 6.6.100 through 6.6.Not affected 6.12.40 through 6.12.Not affected 6.15.8 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before 62e51f51d97477ea4e78c82e7076a171dac86c75Affected
9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before 9e1d2b97f5e2a36a2fd30a8bd30ead9dac5e3a51Affected
9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before 166afe964e8433d52c641f5d1c09102bacee9a92Affected
9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before dc5598482e2d3b234f6d72d6f5568e24f603e51aAffected
9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before 329a80adc0e5f815d0514a6d403aaaf0995cd9beAffected
9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before b361598b7352f02456619a6105c7da952ef69f8fAffected
9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before ac10ed9862104936a412f8b475c869e99f048448Affected
9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1 to before 56448e78a6bb4e1a8528a0e2efe94eff0400c247Affected

LinuxLinux

4.13Affected
before 4.13Not affected
5.4.297 through 5.4.*Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.147 through 6.1.*Not affected
6.6.100 through 6.6.*Not affected
6.12.40 through 6.12.*Not affected
6.15.8 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.