CVE-2025-38229

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, related to the media component, specifically the cxusb module. The issue occurred when the write operation of usb bulk msg() in dvb usb generic rw() failed, resulting in the read operation not being executed, and ultimately, a variable was not initialized. This led to a reported uninit-value in cxusb i2c xfer. The vulnerability was identified by syzbot.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.