CVE-2025-38487

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled

Mitigate e.g. the following:

# echo 1e789080.lpc-snoop > /sys/bus/platform/drivers/aspeed-lpc-snoop/unbind ... [ 120.363594] Unable to handle kernel NULL pointer dereference at virtual address 00000004 when write [ 120.373866] [00000004] *pgd=00000000 [ 120.377910] Internal error: Oops: 805 [#1] SMP ARM [ 120.383306] CPU: 1 UID: 0 PID: 315 Comm: sh Not tainted 6.15.0-rc1-00009-g926217bc7d7d-dirty #20 NONE ... [ 120.679543] Call trace: [ 120.679559] misc_deregister from aspeed_lpc_snoop_remove+0x84/0xac [ 120.692462] aspeed_lpc_snoop_remove from platform_remove+0x28/0x38 [ 120.700996] platform_remove from device_release_driver_internal+0x188/0x200 ...

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1, < 62e51f51d97477ea4e78c82e7076a171dac86c75; >= 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1, < 9e1d2b97f5e2a36a2fd30a8bd30ead9dac5e3a51; >= 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1, < 166afe964e8433d52c641f5d1c09102bacee9a92; >= 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1, < dc5598482e2d3b234f6d72d6f5568e24f603e51a; >= 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1, < 329a80adc0e5f815d0514a6d403aaaf0995cd9be; >= 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1, < b361598b7352f02456619a6105c7da952ef69f8f; >= 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1, < ac10ed9862104936a412f8b475c869e99f048448; >= 9f4f9ae81d0affc182f54dd00285ddb90e0b3ae1, < 56448e78a6bb4e1a8528a0e2efe94eff0400c247
LinuxLinux4.13

References

Timeline

Published
Jul 28, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-384887.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async cryptCVE-2025-384895.5In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again Commit CVE-2025-38496.5A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of theCVE-2025-384907.8In the Linux kernel, the following vulnerability has been resolved: net: libwx: remove duplicate page_pool_put_full_page() page_pool_put_fCVE-2025-384915.5In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller repCVE-2025-384924.7In the Linux kernel, the following vulnerability has been resolved: netfs: Fix race between cache write completion and ALL_QUEUED being setCVE-2025-384935.5In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix crash in timerlat_dump_stack() We have observed kCVE-2025-384947.8In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hid_hw_raw_request hid_hw_raw_request() is acCVE-2025-384955.5In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved CVE-2025-384965.5In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If "try_verify_in_tasklet" is seCVE-2025-384977.1In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writingCVE-2025-384985.5In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensur
CVE-2025-38487: Medium severity, CVSS 5.5 | Vulnix