CVE-2025-40116

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the max3421-hcd driver. Specifically, the kthread run() function can return error pointers, potentially leading to a dereference of a null pointer or an invalid memory location within the max3421 hcd->spi thread pointer during probe cleanup. This occurs because the code does not adequately check if the pointer returned by kthread run() is valid before attempting to dereference it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.