CVE-2025-38634

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-charger: Fix null check for power_supply_get_by_name In the cpcap_usb_detect() function, the power_supply_get_by_name() function may return `NULL` instead of an error pointer. To prevent potential null pointer dereferences, Added a null check.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

History

07 Jan 2026, 16:28

Type Values Removed Values Added
First Time Linux
Debian
Debian debian Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/27001e4f146624c4b3389b029bdc0f8049819560 - () https://git.kernel.org/stable/c/27001e4f146624c4b3389b029bdc0f8049819560 - Patch
References () https://git.kernel.org/stable/c/4ebbb9106aaa2fd58e0359bc3a2490953db2ef0c - () https://git.kernel.org/stable/c/4ebbb9106aaa2fd58e0359bc3a2490953db2ef0c - Patch
References () https://git.kernel.org/stable/c/8e9bdb563916287ba1b4258812434e0585ac6d00 - () https://git.kernel.org/stable/c/8e9bdb563916287ba1b4258812434e0585ac6d00 - Patch
References () https://git.kernel.org/stable/c/9784d832d7c103539cd9afb376534eaa35815d3d - () https://git.kernel.org/stable/c/9784d832d7c103539cd9afb376534eaa35815d3d - Patch
References () https://git.kernel.org/stable/c/a2436263144980cc99a9860c7b43335847afbe53 - () https://git.kernel.org/stable/c/a2436263144980cc99a9860c7b43335847afbe53 - Patch
References () https://git.kernel.org/stable/c/d9fa3aae08f99493e67fb79413c0e95d30fca5e9 - () https://git.kernel.org/stable/c/d9fa3aae08f99493e67fb79413c0e95d30fca5e9 - Patch
References () https://git.kernel.org/stable/c/f642500aa7ed93d2606e4f929244cce9c7467b3a - () https://git.kernel.org/stable/c/f642500aa7ed93d2606e4f929244cce9c7467b3a - Patch
References () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html - () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html - Third Party Advisory
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-476
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5

03 Nov 2025, 18:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html -

28 Aug 2025, 15:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: power: supply: cpcap-charger: Se corrige la comprobación de valores nulos para power_supply_get_by_name. En la función cpcap_usb_detect(), la función power_supply_get_by_name() puede devolver `NULL` en lugar de un puntero de error. Para evitar posibles desreferencias de punteros nulos, se ha añadido una comprobación de valores nulos.
References
  • () https://git.kernel.org/stable/c/4ebbb9106aaa2fd58e0359bc3a2490953db2ef0c -

22 Aug 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-08-22 16:15

Updated : 2026-01-07 16:28


NVD link : CVE-2025-38634

Mitre link : CVE-2025-38634

CVE.ORG link : CVE-2025-38634


JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference