NULL Pointer Dereference Vulnerability in Linux Kernel Affecting Davinci LPSC Clock Register

CVE-2025-38635

What is CVE-2025-38635?

A vulnerability in the Linux kernel relates to a NULL pointer dereference that occurs within the Davinci LPSC clock register functionality. The issue arises when the devm_kasprintf function fails to allocate memory, leading to potential system instability if a subsequent NULL reference occurs. By implementing a NULL check post-memory allocation, this vulnerability is mitigated, ensuring that resources are properly managed and preventing crashes or unexpected behavior in affected systems.

References