Dereference Vulnerability in Linux Kernel Affects STM32 CSI Driver

CVE-2025-40015

What is CVE-2025-40015?

A vulnerability exists in the Linux kernel's STM32 CSI driver where a potential NULL dereference may occur due to improper code sequencing. The function 'stm32_csi_start' incorrectly dereferences 'csidev->s_subdev' prior to performing a NULL check. This oversight can compromise system operation if the dereferenced value is indeed NULL. The flaw has been addressed by adjusting the code to ensure that the NULL check occurs before any dereference, thereby protecting the stability and integrity of systems utilizing the STM32 CSI driver.

References