NetSight
IP …
medium5.5

CVE-2025-38145

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() devm_kasprintf() returns NULL when…

Impact

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() devm_kasprintf() returns NULL when memory allocation fails. Currently, aspeed_lpc_enable_snoop() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue. [arj: Fix Fixes: tag to use subject from 3772e5da4454]

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19 before 5.4.295
from 5.5 before 5.10.239
from 5.11 before 5.15.186
from 5.16 before 6.1.142
from 6.2 before 6.6.94
from 6.7 before 6.12.34
DebianDebian Linux
Version 11.0

Weakness classification

CWE-476

References