First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-38543

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/tegra: nvdec: Fix dma_alloc_coherent error check

Check for NULL return value with dma_alloc_coherent, in line with Robin's fix for vic.c in 'drm/tegra: vic: Fix DMA API misuse'.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= 46f226c93d35b936aeec6eb31da932dc2e86f413, < 61b8d20962d00b7df117011c52f97cbb9c76a669; >= 46f226c93d35b936aeec6eb31da932dc2e86f413, < d1240029f97ac8c06db4dd4407bbbf83e8d08570; >= 46f226c93d35b936aeec6eb31da932dc2e86f413, < a560de522374af931fa994d161db3667b0bb2545; >= 46f226c93d35b936aeec6eb31da932dc2e86f413, < 2e0812eedccd0629d73c9d0b1184a5db055df1da; >= 46f226c93d35b936aeec6eb31da932dc2e86f413, < 44306a684cd1699b8562a54945ddc43e2abc9eab
Linux	Linux	5.17

References

Timeline

Published: Aug 16, 2025
Last modified: Nov 5, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-385445.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix bug due to prealloc collision When userspace is using AF_RX CVE-2025-385455.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_s CVE-2025-385465.5In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allo CVE-2025-385475.5In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps CVE-2025-385487.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Validate the size of the received input buffer A CVE-2025-385495.5In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths CVE-2025-38554.3A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some un CVE-2025-385507.8In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() pmc->idev is stil CVE-2025-385515.5In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix recursived rtnl_lock() during probe() The deadlock app CVE-2025-385527.8In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have ra CVE-2025-385547.8In the Linux kernel, the following vulnerability has been resolved: mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped B CVE-2025-385557.8In the Linux kernel, the following vulnerability has been resolved: usb: gadget : fix use-after-free in composite_dev_cleanup() 1. In func

CVE-2025-38543: Medium severity, CVSS 5.5 | Vulnix