CVE-2025-38635

Katalog CVE

CVSS 5.5 · Medium EPSS 0,17%

Kerentanan NULL Pointer Dereference pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: clk: davinci: Add NULL check in davinci_lpsc_clk_register() devm_kasprintf() returns NULL when memory allocation fails. Currently, davinci_lpsc_clk_register() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue and ensuring no resources are left allocated.

Rincian

Terbit di NVD

22 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 6,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/105e8115944a9f93e9412abe7bb07ed96725adf9 patch
• https://git.kernel.org/stable/c/13de464f445d42738fe18c9a28bab056ba3a290a patch
• https://git.kernel.org/stable/c/1d92608a29251278015f57f3572bc950db7519f0 patch
• https://git.kernel.org/stable/c/23f564326deaafacfd7adf6104755b15216d8320 patch
• https://git.kernel.org/stable/c/2adc945b70c4d97e9491a6c0c9f3b217a9eecfba patch
• https://git.kernel.org/stable/c/6fb19cdcf040e1dec052a9032acb66cc2ad1d43f patch
• https://git.kernel.org/stable/c/77e9ad7a2d0e2a771c9e0be04b9d1639413b5f13 patch
• https://git.kernel.org/stable/c/7843412e5927dafbb844782c56b6380564064109 patch
• https://git.kernel.org/stable/c/7943ed1f05f5cb7372dca2aa227f848747a98791 patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html advisory pihak ketiga