CVE-2025-38155

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()

devm_ioremap() returns NULL on error. Currently, mt7915_mmio_wed_init() does not check for this case, which results in a NULL pointer dereference.

Prevent null pointer dereference in mt7915_mmio_wed_init().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 4f831d18d12da80cec0bebe5b8ca8702a528195a, < e9f9cef1877ac32285dbc1f31b86c8955b712fc2; >= 4f831d18d12da80cec0bebe5b8ca8702a528195a, < 790d05cde359356feea8915094a51166af1629f5; >= 4f831d18d12da80cec0bebe5b8ca8702a528195a, < d825ed9fd768be10d52beba6f57a4b50c0c154aa; >= 4f831d18d12da80cec0bebe5b8ca8702a528195a, < efb95439c1477bbc955cacd0179c35e7861b437c
LinuxLinux6.2

References

Timeline

Published
Jul 3, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-381565.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() devm_CVE-2025-381577.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Abort software beacon handling if disabled A maliciouCVE-2025-381585.5In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: fix XQE dma address error The dma addresses of EQE CVE-2025-381597.1In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds CVE-2025-38167.2A vulnerability classified as critical was found in westboy CicadasCMS 2.0. This vulnerability affects unknown code of the file /system/scheCVE-2025-381605.5In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() devm_kasprCVE-2025-381615.5In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction UpoCVE-2025-381625.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation CVE-2025-381635.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi->total_valid_block_count syzbot reCVE-2025-381645.5In the Linux kernel, the following vulnerability has been resolved: f2fs: zone: fix to avoid inconsistence in between SIT and SSA w/ belowCVE-2025-381655.5In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skb_linearize The panic can be reCVE-2025-381665.5In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] ------------[ cut here
CVE-2025-38155: Medium severity, CVSS 5.5 | Vulnix