Null Pointer Dereference in Linux Kernel Power Supply Management

CVE-2025-38634

What is CVE-2025-38634?

A vulnerability exists in the Linux kernel where the function power_supply_get_by_name() may return a NULL pointer instead of an error pointer during execution in the cpcap_usb_detect() function. This flaw could lead to null pointer dereferences, potentially causing unintended behavior or crashes in systems reliant on power management. The issue has been addressed by implementing a null check to enhance stability and security in the affected components.

References