CVE-2025-38301

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38301
In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: unbreak driver after cleanup Commit 29be47fcd6a0 ("nvmem: zynqmp_nvmem: zynqmp_nvmem_probe cleanup") changed the driver to expect the device pointer to be passed as the "context", but in nvmem the context parameter comes from nvmem_config.priv which is never set - Leading to null pointer exceptions when the device is accessed.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3728101f56ef54425a11027a3ddc2c3941d60b71 Patch
https://git.kernel.org/stable/c/c8bb1bcea877446f86922a8fd1661b8c07d90e5c Patch
https://git.kernel.org/stable/c/fe8abdd175d7b547ae1a612757e7902bcd62e9cf Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Nov 2025, 20:13

Type Values Removed Values Added
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/3728101f56ef54425a11027a3ddc2c3941d60b71 - () https://git.kernel.org/stable/c/3728101f56ef54425a11027a3ddc2c3941d60b71 - Patch
References () https://git.kernel.org/stable/c/c8bb1bcea877446f86922a8fd1661b8c07d90e5c - () https://git.kernel.org/stable/c/c8bb1bcea877446f86922a8fd1661b8c07d90e5c - Patch
References () https://git.kernel.org/stable/c/fe8abdd175d7b547ae1a612757e7902bcd62e9cf - () https://git.kernel.org/stable/c/fe8abdd175d7b547ae1a612757e7902bcd62e9cf - Patch

10 Jul 2025, 13:17

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nvmem: zynqmp_nvmem: unbreak driver after cleanup El commit 29be47fcd6a0 ("nvmem: zynqmp_nvmem: zynqmp_nvmem_probe cleanup") cambió el controlador para esperar que el puntero del dispositivo se pase como "contexto", pero en nvmem el parámetro de contexto proviene de nvmem_config.priv que nunca se establece, lo que genera excepciones de puntero nulo cuando se accede al dispositivo.

10 Jul 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-10 08:15

Updated : 2025-11-19 20:13

NVD link : CVE-2025-38301

Mitre link : CVE-2025-38301

CVE.ORG link : CVE-2025-38301

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference