CVE-2025-38318

A flaw was found in the Linux kernel's perf: arm-ni subsystem. This vulnerability stems from a missing call to platform_set_drvdata() during device probing, which can cause a subsequent call to platform_get_drvdata() to return a null value. A local attacker could exploit this null pointer dereference to trigger a system crash, leading to a Denial of Service (DoS). While primarily leading to a system crash, under specific conditions, this flaw could potentially be leveraged for information disclosure or arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.