CVE-2025-40224
kernel: hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · December 4, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()
The driver allocates memory for sensor data using devm_kzalloc(), but did not check if the allocation succeeded. In case of memory allocation failure, dereferencing the NULL pointer would lead to a kernel crash.
Add a NULL pointer check and return -ENOMEM to handle allocation failure properly.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified