-

CVE-2025-38275

In the Linux kernel, the following vulnerability has been resolved:

phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug

The qmp_usb_iomap() helper function currently returns the raw result of
devm_ioremap() for non-exclusive mappings. Since devm_ioremap() may return
a NULL pointer and the caller only checks error pointers with IS_ERR(),
NULL could bypass the check and lead to an invalid dereference.

Fix the issue by checking if devm_ioremap() returns NULL. When it does,
qmp_usb_iomap() now returns an error pointer via IOMEM_ERR_PTR(-ENOMEM),
ensuring safe and consistent error handling.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
≫
Product Linux
Default Statusunaffected
Version < 0b979a409e40457ca1b5cb48755d1f34eee58805
Version a5d6b1ac56cbd6b5850a3a54e35f1cb71e8e8cdd
Status affected
Version < 127dfb4f1c5a2b622039c5d203f321380ea36665
Version a5d6b1ac56cbd6b5850a3a54e35f1cb71e8e8cdd
Status affected
Version < 5072c1749197fc28b27d7efc0d80320d7cac9572
Version a5d6b1ac56cbd6b5850a3a54e35f1cb71e8e8cdd
Status affected
Version < 0c33117f00c8c5363c22676931b22ae5041f7603
Version a5d6b1ac56cbd6b5850a3a54e35f1cb71e8e8cdd
Status affected
Version < d14402a38c2d868cacb1facaf9be908ca6558e59
Version a5d6b1ac56cbd6b5850a3a54e35f1cb71e8e8cdd
Status affected
Version 368ea32e0ad0335bdf3180067875a928e35387c6
Status affected
VendorLinux
≫
Product Linux
Default Statusaffected
Version 6.1
Status affected
Version < 6.1
Version 0
Status unaffected
Version <= 6.1.*
Version 6.1.142
Status unaffected
Version <= 6.6.*
Version 6.6.94
Status unaffected
Version <= 6.12.*
Version 6.12.34
Status unaffected
Version <= 6.15.*
Version 6.15.3
Status unaffected
Version <= *
Version 6.16
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.06
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string