Kernel Vulnerability in Linux Affecting Aspeed LPC Snooper

CVE-2025-38487

What is CVE-2025-38487?

A vulnerability exists in the Linux kernel related to the Aspeed LPC Snooper driver, where channels that are not enabled may be incorrectly disabled. This could lead to a NULL pointer dereference when attempting to execute specific driver commands, resulting in a potential system crash. Erroneous calls during device removal processes could also exacerbate stability issues, especially in multi-threaded ARM environments. Regular updates and proper device management practices are essential to mitigate associated risks.

References