CVE-2025-38634

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

power: supply: cpcap-charger: Fix null check for power_supply_get_by_name

In the cpcap_usb_detect() function, the power_supply_get_by_name() function may return `NULL` instead of an error pointer. To prevent potential null pointer dereferences, Added a null check.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= eab4e6d953c1059a30ac0f15826abc7dd2374d3c, < 4ebbb9106aaa2fd58e0359bc3a2490953db2ef0c; >= eab4e6d953c1059a30ac0f15826abc7dd2374d3c, < a2436263144980cc99a9860c7b43335847afbe53; >= eab4e6d953c1059a30ac0f15826abc7dd2374d3c, < 8e9bdb563916287ba1b4258812434e0585ac6d00; >= eab4e6d953c1059a30ac0f15826abc7dd2374d3c, < f642500aa7ed93d2606e4f929244cce9c7467b3a; >= eab4e6d953c1059a30ac0f15826abc7dd2374d3c, < 9784d832d7c103539cd9afb376534eaa35815d3d; >= eab4e6d953c1059a30ac0f15826abc7dd2374d3c, < 27001e4f146624c4b3389b029bdc0f8049819560; >= eab4e6d953c1059a30ac0f15826abc7dd2374d3c, < d9fa3aae08f99493e67fb79413c0e95d30fca5e9
LinuxLinux5.14

References

Timeline

Published
Aug 22, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-386355.5In the Linux kernel, the following vulnerability has been resolved: clk: davinci: Add NULL check in davinci_lpsc_clk_register() devm_kasprCVE-2025-386367.1In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors tracepoinCVE-2025-386375.5In the Linux kernel, the following vulnerability has been resolved: net_sched: skbprio: Remove overly strict queue assertions In the curreCVE-2025-386385.5In the Linux kernel, the following vulnerability has been resolved: ipv6: add a retry logic in net6_rt_notify() inet6_rt_notify() can be cCVE-2025-386395.5In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nfacct: don't assume acct name is null-terminated BUG: KCVE-2025-38642.3Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploitCVE-2025-386405.5In the Linux kernel, the following vulnerability has been resolved: bpf: Disable migration in nf_hook_run_bpf(). syzbot reported that the CVE-2025-386415.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure AvCVE-2025-386425.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix WARN_ON for monitor mode on some devices On deviceCVE-2025-386435.5In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() CalleCVE-2025-386445.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject TDLS operations when station is not associated CVE-2025-386455.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check device memory pointer before usage Add a NULL check be
CVE-2025-38634: Medium severity, CVSS 5.5 | Vulnix