Linux Kernel Vulnerability in mlb_usio_probe Function

CVE-2025-38135

What is CVE-2025-38135?

In the Linux kernel, a vulnerability was identified in the mlb_usio_probe function, related to device memory mapping. The function failed to verify if the devm_ioremap() call returned NULL, which could lead to a null pointer dereference. This issue could cause critical failures or crashes within the affected system. Implementing a NULL pointer check after the devm_ioremap() call has resolved this issue, preventing potential exploits.

References