CVE-2025-38573

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38573
In the Linux kernel, the following vulnerability has been resolved: spi: cs42l43: Property entry should be a null-terminated array The software node does not specify a count of property entries, so the array must be null-terminated. When unterminated, this can lead to a fault in the downstream cs35l56 amplifier driver, because the node parse walks off the end of the array into unknown memory.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/139b5df757a0aa436f763b0038e0b73808d2f4b6 Patch
https://git.kernel.org/stable/c/674328102baad76c7a06628efc01974ece5ae27f Patch
https://git.kernel.org/stable/c/9f0035ae38d2571f5ddedc829d74492013caa625 Patch
https://git.kernel.org/stable/c/ffcfd071eec7973e58c4ffff7da4cb0e9ca7b667 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

26 Nov 2025, 19:59

Type Values Removed Values Added
CWE NVD-CWE-Other
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/139b5df757a0aa436f763b0038e0b73808d2f4b6 - () https://git.kernel.org/stable/c/139b5df757a0aa436f763b0038e0b73808d2f4b6 - Patch
References () https://git.kernel.org/stable/c/674328102baad76c7a06628efc01974ece5ae27f - () https://git.kernel.org/stable/c/674328102baad76c7a06628efc01974ece5ae27f - Patch
References () https://git.kernel.org/stable/c/9f0035ae38d2571f5ddedc829d74492013caa625 - () https://git.kernel.org/stable/c/9f0035ae38d2571f5ddedc829d74492013caa625 - Patch
References () https://git.kernel.org/stable/c/ffcfd071eec7973e58c4ffff7da4cb0e9ca7b667 - () https://git.kernel.org/stable/c/ffcfd071eec7973e58c4ffff7da4cb0e9ca7b667 - Patch

20 Aug 2025, 14:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: spi: cs42l43: La entrada de propiedad debe ser una matriz con terminación nula. El nodo de software no especifica un número de entradas de propiedad, por lo que la matriz debe terminar en nulo. Si no está terminada, esto puede provocar un fallo en el controlador del amplificador cs35l56, ya que el análisis del nodo se desvía del final de la matriz hacia una memoria desconocida.

19 Aug 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-19 17:15

Updated : 2025-11-26 19:59

NVD link : CVE-2025-38573

Mitre link : CVE-2025-38573

CVE.ORG link : CVE-2025-38573

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other