← CVE Intelligence

CVE-2025-38381

Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() The cs40l50_upload_owt() function allocates memory via kmalloc() without checking for allocation failure, which could lead to a NULL pointer dereference. Return -ENOMEM in case allocation fails.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected c38fe1bb5d21c2ce0857965ee06174ee587d6b42 before ea20568895c1122f15b6fc9e8d02c6cbe22964f8; affected c38fe1bb5d21c2ce0857965ee06174ee587d6b42 before e87fc697fa4be5164e47cfba4ddd4732499adc60; affected c38fe1bb5d21c2ce0857965ee06174ee587d6b42 before 4cf65845fdd09d711fc7546d60c9abe010956922
Linux / Linuxaffected 6.11; unaffected 0 before 6.11; unaffected 6.12.37 through 6.12.*; unaffected 6.15.6 through 6.15.*; unaffected 6.16 through *

CWE

No CWE identifiers supplied.

References