Null Pointer Dereference in Linux Kernel Affects Wireless Driver Functionality

CVE-2025-38541

What is CVE-2025-38541?

In the Linux kernel, a null pointer dereference vulnerability exists within the mt7925 wireless driver initialization process. The issue arises during the execution of mt7925_thermal_init(), where it fails to verify the output of devm_kasprintf(). If devm_kasprintf() returns NULL due to an error, the subsequent dereference leads to a system crash. Implementing a NULL check after this function call is crucial to prevent disruptions in wireless functionality and maintain system stability.

References