Linux Kernel Vulnerability in Power Supply by Vendor

CVE-2025-38171

What is CVE-2025-38171?

In the Linux kernel, a vulnerability pertaining to the power supply component max77705 was discovered that involves an error handling flaw in the workqueue mechanism. The method create_singlethread_workqueue() was not properly handling error conditions, resulting in NULL being returned instead of expected error pointers. This oversight requires immediate attention, particularly in the probe details of the power supply, necessitating a cleanup of the workqueue during error paths to prevent potential misuse. Proper patching is crucial to maintaining system integrity and security.

References