Linux Kernel Vulnerability in Lenovo SE30 Watchdog Driver

CVE-2025-38144

What is CVE-2025-38144?

A vulnerability in the Lenovo SE30 Watchdog Driver of the Linux kernel may lead to a NULL pointer dereference during operation. The issue arises from the function lenovo_se30_wdt_probe(), which fails to check the return value of the devm_ioremap() function. If devm_ioremap() returns NULL on error, the unwarranted dereference of this NULL pointer can result in application instability or crashes. To mitigate this, a NULL check has been introduced after the call to devm_ioremap(), ensuring safer execution and improved reliability of the driver.

References