In the Linux kernel, the following vulnerability has been resolved:
soc: aspeed: Add NULL check in aspeedlpcenable_snoop()
devmkasprintf() returns NULL when memory allocation fails. Currently, aspeedlpcenablesnoop() does not check for this case, which results in a NULL pointer dereference.
Add NULL check after devm_kasprintf() to prevent this issue.
[arj: Fix Fixes: tag to use subject from 3772e5da4454]
[
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1216.0,
"function_hash": "96849482538079174085708527358232874340"
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c",
"function": "aspeed_lpc_enable_snoop"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@45b2e8b0fdd280aba04c3cc869e9ae500c44e4b7",
"signature_version": "v1",
"id": "CVE-2025-38145-1239f1f7"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1216.0,
"function_hash": "96849482538079174085708527358232874340"
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c",
"function": "aspeed_lpc_enable_snoop"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c550999f939b529d28a914d5034cc4290066aea6",
"signature_version": "v1",
"id": "CVE-2025-38145-1296d62b"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"193356126534197374422604174753342086836",
"310834623647141548718335800045465243253",
"271336270126261455826066226878863330515",
"118998933157375563486189335203880730953",
"322838439285659188841332663693439938844",
"235016894976277958762287338061913156112",
"89276361128980822714257072776066515276",
"298899727523233816059016950124693733994",
"138987180534468346218396463387832889530",
"155582042329636399181468731129766166126",
"10159363312468416494411373139083858061",
"118587283750420520545474676207591789115",
"135145948087578231144229802481117897535",
"314004803590576669845674667878339522975",
"202470090989684169877572642302474346318",
"278752340954642355052443402446354052385"
],
"threshold": 0.9
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@45b2e8b0fdd280aba04c3cc869e9ae500c44e4b7",
"signature_version": "v1",
"id": "CVE-2025-38145-132c3b74"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"193356126534197374422604174753342086836",
"310834623647141548718335800045465243253",
"271336270126261455826066226878863330515",
"118998933157375563486189335203880730953",
"322838439285659188841332663693439938844",
"235016894976277958762287338061913156112",
"89276361128980822714257072776066515276",
"298899727523233816059016950124693733994",
"138987180534468346218396463387832889530",
"155582042329636399181468731129766166126",
"10159363312468416494411373139083858061",
"118587283750420520545474676207591789115",
"135145948087578231144229802481117897535",
"314004803590576669845674667878339522975",
"202470090989684169877572642302474346318",
"278752340954642355052443402446354052385"
],
"threshold": 0.9
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c550999f939b529d28a914d5034cc4290066aea6",
"signature_version": "v1",
"id": "CVE-2025-38145-69c74fa1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1216.0,
"function_hash": "96849482538079174085708527358232874340"
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c",
"function": "aspeed_lpc_enable_snoop"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1706e0e1a74b095cbc60375b9b1e6205f5f4c98",
"signature_version": "v1",
"id": "CVE-2025-38145-8e420343"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1216.0,
"function_hash": "96849482538079174085708527358232874340"
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c",
"function": "aspeed_lpc_enable_snoop"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fd889c145722579aa038c31cbc07cfdd4d75166",
"signature_version": "v1",
"id": "CVE-2025-38145-9f73528d"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"193356126534197374422604174753342086836",
"310834623647141548718335800045465243253",
"271336270126261455826066226878863330515",
"118998933157375563486189335203880730953",
"322838439285659188841332663693439938844",
"235016894976277958762287338061913156112",
"89276361128980822714257072776066515276",
"298899727523233816059016950124693733994",
"138987180534468346218396463387832889530",
"155582042329636399181468731129766166126",
"10159363312468416494411373139083858061",
"118587283750420520545474676207591789115",
"135145948087578231144229802481117897535",
"314004803590576669845674667878339522975",
"202470090989684169877572642302474346318",
"278752340954642355052443402446354052385"
],
"threshold": 0.9
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fd889c145722579aa038c31cbc07cfdd4d75166",
"signature_version": "v1",
"id": "CVE-2025-38145-a439038a"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"193356126534197374422604174753342086836",
"310834623647141548718335800045465243253",
"271336270126261455826066226878863330515",
"118998933157375563486189335203880730953",
"322838439285659188841332663693439938844",
"235016894976277958762287338061913156112",
"89276361128980822714257072776066515276",
"298899727523233816059016950124693733994",
"138987180534468346218396463387832889530",
"155582042329636399181468731129766166126",
"10159363312468416494411373139083858061",
"118587283750420520545474676207591789115",
"135145948087578231144229802481117897535",
"314004803590576669845674667878339522975",
"202470090989684169877572642302474346318",
"278752340954642355052443402446354052385"
],
"threshold": 0.9
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1706e0e1a74b095cbc60375b9b1e6205f5f4c98",
"signature_version": "v1",
"id": "CVE-2025-38145-c7a4c9e9"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1216.0,
"function_hash": "96849482538079174085708527358232874340"
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c",
"function": "aspeed_lpc_enable_snoop"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8312b1f776f71979bf33bda7acc05b348e8792c7",
"signature_version": "v1",
"id": "CVE-2025-38145-ceb24eb7"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1216.0,
"function_hash": "96849482538079174085708527358232874340"
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c",
"function": "aspeed_lpc_enable_snoop"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f697ef117ecbf3a367dfc559a6a3589905956530",
"signature_version": "v1",
"id": "CVE-2025-38145-db243efa"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"193356126534197374422604174753342086836",
"310834623647141548718335800045465243253",
"271336270126261455826066226878863330515",
"118998933157375563486189335203880730953",
"322838439285659188841332663693439938844",
"235016894976277958762287338061913156112",
"89276361128980822714257072776066515276",
"298899727523233816059016950124693733994",
"138987180534468346218396463387832889530",
"155582042329636399181468731129766166126",
"10159363312468416494411373139083858061",
"118587283750420520545474676207591789115",
"135145948087578231144229802481117897535",
"314004803590576669845674667878339522975",
"202470090989684169877572642302474346318",
"278752340954642355052443402446354052385"
],
"threshold": 0.9
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8312b1f776f71979bf33bda7acc05b348e8792c7",
"signature_version": "v1",
"id": "CVE-2025-38145-f03cb9c4"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"193356126534197374422604174753342086836",
"310834623647141548718335800045465243253",
"271336270126261455826066226878863330515",
"118998933157375563486189335203880730953",
"322838439285659188841332663693439938844",
"235016894976277958762287338061913156112",
"89276361128980822714257072776066515276",
"298899727523233816059016950124693733994",
"138987180534468346218396463387832889530",
"155582042329636399181468731129766166126",
"10159363312468416494411373139083858061",
"118587283750420520545474676207591789115",
"135145948087578231144229802481117897535",
"314004803590576669845674667878339522975",
"202470090989684169877572642302474346318",
"278752340954642355052443402446354052385"
],
"threshold": 0.9
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f697ef117ecbf3a367dfc559a6a3589905956530",
"signature_version": "v1",
"id": "CVE-2025-38145-f7750aa3"
}
]