NULL Pointer Dereference Vulnerability in Linux Kernel CS40L50 VIBRA Module

CVE-2025-38381

What is CVE-2025-38381?

A vulnerability in the Linux kernel within the cs40l50-vibra module allows for a potential NULL pointer dereference due to the cs40l50_upload_owt() function's failure to check for memory allocation errors. If kmalloc() fails to allocate memory, a subsequent dereference of the NULL pointer can lead to system instability or crash. The fix introduces error handling to return -ENOMEM when memory allocation is unsuccessful, enhancing system robustness.

References