CVE-2025-38368

low-risk
Published 2025-07-25

In the Linux kernel, the following vulnerability has been resolved: misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() The returned value, pfsm->miscdev.name, from devm_kasprintf() could be NULL. A pointer check is added to prevent potential NULL pointer dereference. This is similar to the fix in commit 3027e7b15b02 ("ice: Fix some null pointer dereference issues in ice_ptp.c"). This issue is found by our static analysis tool.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (4)

Patch https://git.kernel.org/stable/c/a10c8bff454b11ef553d9df19ee722d2df34cd0e
Patch https://git.kernel.org/stable/c/a8d1b4f219e8833130927f19d1c8bfbf49215ce4
Patch https://git.kernel.org/stable/c/a99b598d836c9c6411110c70a2da134c78d96e67
Patch https://git.kernel.org/stable/c/d27ee5c59881a64ea92e363502742cb4f38b7460
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal