CVE-2025-38531

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a flaw where the indio dev->dev structure is used before initialization in various probe functions. This can lead to a kernel panic when functions like devm regulator bulk get enable() fail and subsequently call dev err probe() with the uninitialized device. The issue affects functions such as dev err probe(), dev err(), dev warn(), and dev info().

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.