CVE-2025-38145

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/07/2025
Last modified:
03/07/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()<br /> <br /> devm_kasprintf() returns NULL when memory allocation fails. Currently,<br /> aspeed_lpc_enable_snoop() does not check for this case, which results in a<br /> NULL pointer dereference.<br /> <br /> Add NULL check after devm_kasprintf() to prevent this issue.<br /> <br /> [arj: Fix Fixes: tag to use subject from 3772e5da4454]

Impact