CVE-2025-38381 Details
Description
In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() The cs40l50_upload_owt() function allocates memory via kmalloc() without checking for allocation failure, which could lead to a NULL pointer dereference. Return -ENOMEM in case allocation fails.
A potential NULL pointer dereference vulnerability has been identified in the Linux kernel's cs40l50-vibra component. The issue arises in the cs40l50_upload_owt() function, which allocates memory using kmalloc() without verifying if the allocation was successful. This oversight could lead to a NULL pointer dereference. The vulnerability has been addressed by modifying the function to return -ENOMEM in the event of a memory allocation failure.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/4cf65845fdd09d711fc7546d60c9abe010956922 | kernel.org | Patch |
| https://git.kernel.org/stable/c/e87fc697fa4be5164e47cfba4ddd4732499adc60 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ea20568895c1122f15b6fc9e8d02c6cbe22964f8 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.11, < 6.12.37 >= 6.13, < 6.15.6 6.16 rc1 6.16 rc2 6.16 rc3 6.16 rc4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 19, 2025 | Initial Analysis | [email protected] |
| Jul 25, 2025 | New CVE Received | kernel.org |