Null Pointer Dereference in Linux Kernel's mt7915 Driver

CVE-2025-38155

What is CVE-2025-38155?

A vulnerability exists in the Linux kernel specifically within the mt7915 driver that can lead to a null pointer dereference during the initialization process. The issue arises when the function mt7915_mmio_wed_init() calls devm_ioremap(), which may return NULL upon encountering an error. If this case is not properly checked, it results in potential application crashes or unexpected behavior due to the null reference. This vulnerability has been addressed by adding appropriate checks to prevent the dereference from occurring, ensuring safer execution and more robust handling of initialization errors.

References