CVE Database›Document archive›CVE-2025-40224

CVE-2025-40224

kernel: hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · December 4, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()

The driver allocates memory for sensor data using devm_kzalloc(), but did not check if the allocation succeeded. In case of memory allocation failure, dereferencing the NULL pointer would lead to a kernel crash.

Add a NULL pointer check and return -ENOMEM to handle allocation failure properly.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified