NULL Pointer Dereference in Aspeed LPC Enable Snoop Function of Linux Kernel

CVE-2025-38145

What is CVE-2025-38145?

A security issue has been identified in the Linux kernel concerning the aspeed_lpc_enable_snoop() function. When memory allocation fails and devm_kasprintf() returns NULL, the function fails to check for this nullity, potentially leading to a NULL pointer dereference. This flaw underscores the importance of implementing proper null checks in memory management within kernel functions to prevent unexpected crashes and security issues.

References