CVE-2025-40015
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
20/10/2025
Last modified:
21/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: stm32-csi: Fix dereference before NULL check<br />
<br />
In &#39;stm32_csi_start&#39;, &#39;csidev->s_subdev&#39; is dereferenced directly while<br />
assigning a value to the &#39;src_pad&#39;. However the same value is being<br />
checked against NULL at a later point of time indicating that there<br />
are chances that the value can be NULL.<br />
<br />
Move the dereference after the NULL check.