Riskcovery

CVE-2025-38629

ALSA: usb: scarlett2: Fix missing NULL check

State
Published
Severity
Not scored
Published
Aug 22, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb: scarlett2: Fix missing NULL check

scarlett2_input_select_ctl_info() sets up the string arrays allocated via kasprintf(), but it misses NULL checks, which may lead to NULL dereference Oops. Let's add the proper NULL check.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8eba063b5b2b498ddd01ea6f29fc9b12368c3d53 to before d558db85920b124bac36f8a7ddc5de0aa7491bddAffected
  • 8eba063b5b2b498ddd01ea6f29fc9b12368c3d53 to before 2c735fcaee81ad8056960659dc9dc460891e76b0Affected
  • 8eba063b5b2b498ddd01ea6f29fc9b12368c3d53 to before df485a4b2b3ee5b35c80f990beb554e38a8a5fb1Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.15.10 through 6.15.*Not affected
  • 6.16.1 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.