CVE-2025-38138

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A NULL pointer dereference issue has been identified in the Linux kernel. The problem arises because devm kasprintf() returns NULL when memory allocation fails, but udma probe() does not check for this case. To prevent the issue, a NULL check has been added after devm kasprintf().

Recommendations: For the affected Linux kernel versions, add a NULL check after devm kasprintf() in udma probe() to prevent the NULL pointer dereference issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.