CVE-2025-38274

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A potential null pointer dereference issue was identified in the fpga mgr test img load sgt() function. The function allocates memory for sgt using kunit kzalloc(), but fails to verify if the allocation was successful. Subsequently, sgt is passed to sg alloc table(), which then passes it to sg alloc table(). This function attempts to zero out the memory using memset(). If the allocation fails, sgt will be null, leading to a null pointer dereference when memset() is called.

Recommendations: Check the allocation with KUNIT ASSERT NOT ERR OR NULL().