Null Pointer Dereference Vulnerability in Linux Kernel Affects DVB Frontends

CVE-2025-38694

What is CVE-2025-38694?

A vulnerability in the Linux kernel's DVB frontends has been identified, specifically in the dib7090p_rw_on_apb function. Here, user-controlled messages can lead to a null pointer dereference when the buffer is null and length is zero. If checks on the buffer are bypassed, the system can crash when accessing unverified memory locations, representing a significant security risk. Similar issues have been addressed in related functionality, highlighting the importance of robust input validation and error handling.

References