CVE-2025-38145

MEDIUM EPSS 6.7%
Published Jul 3, 202512mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jul 3, 2025 12mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() devm_kasprintf() returns NULL when memory allocation fails. Currently, aspeed_lpc_enable_snoop() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue. [arj: Fix Fixes: tag to use subject from 3772e5da4454]

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
6.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 8

VendorProductVersionRange
linuxlinux_kernel*≥4.19  –  <5.4.295
linuxlinux_kernel*≥5.5  –  <5.10.239
linuxlinux_kernel*≥5.11  –  <5.15.186
linuxlinux_kernel*≥5.16  –  <6.1.142
linuxlinux_kernel*≥6.2  –  <6.6.94
linuxlinux_kernel*≥6.7  –  <6.12.34
linuxlinux_kernel*≥6.13  –  <6.15.3
debiandebian_linux11.0any

References 10

  • git.kernel.org https://git.kernel.org/stable/c/1fd889c145722579aa038c31cbc07cfdd4d75166
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2beee9cf833374550e673d428ad8b6ab37c175b3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/45b2e8b0fdd280aba04c3cc869e9ae500c44e4b7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8312b1f776f71979bf33bda7acc05b348e8792c7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c550999f939b529d28a914d5034cc4290066aea6
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d62a589eaaec6385e3e2b25cf5a28b4560ace93f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f1706e0e1a74b095cbc60375b9b1e6205f5f4c98
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f697ef117ecbf3a367dfc559a6a3589905956530
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
    Third Party Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
    Third Party Advisory

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/1fd889c145722579aa038c31cbc07cfdd4d75166
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2beee9cf833374550e673d428ad8b6ab37c175b3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/45b2e8b0fdd280aba04c3cc869e9ae500c44e4b7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8312b1f776f71979bf33bda7acc05b348e8792c7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c550999f939b529d28a914d5034cc4290066aea6
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d62a589eaaec6385e3e2b25cf5a28b4560ace93f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f1706e0e1a74b095cbc60375b9b1e6205f5f4c98
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f697ef117ecbf3a367dfc559a6a3589905956530
    Patch