Null Pointer Dereference in Raspberry Pi Clock Driver by Linux Kernel

CVE-2025-38160

What is CVE-2025-38160?

The Linux kernel's raspberrypi_clk_register function is susceptible to a null pointer dereference due to the absence of a check for NULL in the devm_kasprintf() output. When memory allocation fails, the failure to handle the NULL return results in a dereference error, potentially leading to application crashes or undefined behavior. This issue has been addressed by implementing a NULL check after the memory allocation to enhance system stability and security.

References