CVE-2025-38281: wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: Add NULL check in mt7996thermalinit
devmkasprintf() can return a NULL pointer on failure,but this returned value in mt7996thermalinit() is not checked. Add NULL check in mt7996thermalinit(), to handle kernel NULL pointer dereference error.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38281?
CVE-2025-38281 has a medium severity due to potential denial of service risks associated with a NULL pointer dereference.
How do I fix CVE-2025-38281?
To fix CVE-2025-38281, update to the latest version of the Linux kernel where the vulnerability is resolved.
What versions of the Linux kernel are affected by CVE-2025-38281?
CVE-2025-38281 affects multiple versions of the Linux kernel prior to the patch addressing this issue.
What is the nature of the vulnerability in CVE-2025-38281?
CVE-2025-38281 involves a NULL pointer dereference in the mt7996_thermal_init function in the Linux kernel.
Is CVE-2025-38281 exploitable remotely?
CVE-2025-38281 is not known to be remotely exploitable but could potentially lead to a denial of service if triggered.