NetSight
medium5.5

CVE-2025-38143

In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wled_configure() devm_kasprintf() returns NULL when me…

Impact

In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wled_configure() devm_kasprintf() returns NULL when memory allocation fails. Currently, wled_configure() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.0 before 5.10.239
from 5.11 before 5.15.186
from 5.16 before 6.1.142
from 6.2 before 6.6.94
from 6.7 before 6.12.34
from 6.13 before 6.15.3
DebianDebian Linux
Version 11.0

Weakness classification

References