CVE-2025-38648

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The stm32 spi probe function lacked a check to ensure the pointer returned by of device get match data was not NULL before accessing its members. This could lead to a NULL pointer dereference when accessing cfg->has device mode, potentially causing a system crash. The issue has been resolved by adding a check to verify that cfg is not NULL before accessing its members, and logging an error message if it is NULL.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.