CVE-2025-38381

kernel: Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()

The cs40l50_upload_owt() function allocates memory via kmalloc() without checking for allocation failure, which could lead to a NULL pointer dereference.

Return -ENOMEM in case allocation fails.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified