CVE-2025-40156

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()

The drv->sram_reg pointer could be set to ERR_PTR(-EPROBE_DEFER) which would lead to a error pointer dereference. Use IS_ERR_OR_NULL() to check that the pointer is valid.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= e09bd5757b5227d6804b30c58d4587f7f87d1afa, < 9cc23e221f392304b7b8aad213812564ddf6517e; >= e09bd5757b5227d6804b30c58d4587f7f87d1afa, < 80eab6a9df7e1107dc334434dbacd05297703377; >= e09bd5757b5227d6804b30c58d4587f7f87d1afa, < 44e32104cf7e670e3d683c97b52350d8fac23322; >= e09bd5757b5227d6804b30c58d4587f7f87d1afa, < 24d61b6e23d2c7291c528dd43a0bf76b5c05c8f0; >= e09bd5757b5227d6804b30c58d4587f7f87d1afa, < fc33bf0e097c6834646b98a7b3da0ae5b617f0f9
LinuxLinux6.1

References

Timeline

Published
Nov 12, 2025
Last modified
Oct 19, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-40157In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller WhenCVE-2025-401588.1In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_output() Use RCU in ip6_output() in order to use CVE-2025-401597.8In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdp_desc validation Turned out certain CVE-2025-40169.1A vulnerability classified as critical has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This affects thCVE-2025-40160In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change find_virq() to returCVE-2025-40161In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The driver incorrectly CVE-2025-40162In the Linux kernel, the following vulnerability has been resolved: ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails devmCVE-2025-40163In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Stop dl_server before CPU goes offline IBM CI tool repCVE-2025-401645.5In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smp_processor_id() in preemptible code warnings SyzbCVE-2025-401657.8In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: m2m: Fix streaming cleanup on release If streamoCVE-2025-401667.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Check GuC running state before deregistering exec queue InCVE-2025-401677.8In the Linux kernel, the following vulnerability has been resolved: ext4: detect invalid INLINE_DATA + EXTENTS flag combination syzbot rep
CVE-2025-40156: Unscored | Vulnix