CVEvulnerability
CVE-2025-38007
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-18
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
Description
In the Linux kernel, the following vulnerability has been resolved:
HID: uclogic: Add NULL check in uclogic_input_configured()
devm_kasprintf() returns NULL when memory allocation fails. Currently,
uclogic_input_configured() does not check for this case, which results
in a NULL pointer dereference.
Add NULL check after devm_kasprintf() to prevent this issue.
Affected configurations
• linux linux kernel (>= 6.1.53 < 6.1.140)
• linux linux kernel (>= 6.4.16 < 6.5)
• linux linux kernel (>= 6.5.3 < 6.6.92)
• linux linux kernel (>= 6.7 < 6.12.30)
• linux linux kernel (>= 6.13 < 6.14.8)
• linux linux kernel 6.15
• debian debian linux 11.0
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://git.kernel.org/stable/c/00d52b2fa6083dd0f5c44f3604cd1bad1f9177dc Patch
- https://git.kernel.org/stable/c/01b76cc8ca243fc3376b035aa326bbc4f03d384b Patch
- https://git.kernel.org/stable/c/94e7272b636a0677082e0604609e4c471e0a2caf Patch
- https://git.kernel.org/stable/c/a9f58479a1a2c6f72907679c4df2f4ed92b05b39 Patch
- https://git.kernel.org/stable/c/ad6caaf29bc26a48b1241ce82561fcbcf0a75aa9 Patch
- https://git.kernel.org/stable/c/b616453d719ee1b8bf2ea6f6cc6c6258a572a590 Patch
- https://git.kernel.org/stable/c/bd07f751208ba190f9b0db5e5b7f35d5bb4a8a1e Patch
- https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html Mailing List, Third Party Advisory