CVE-2025-38301: nvmem: zynqmp_nvmem: unbreak driver after cleanup
In the Linux kernel, the following vulnerability has been resolved:
nvmem: zynqmpnvmem: unbreak driver after cleanup
Commit 29be47fcd6a0 ("nvmem: zynqmpnvmem: zynqmpnvmemprobe cleanup") changed the driver to expect the device pointer to be passed as the "context", but in nvmem the context parameter comes from nvmemconfig.priv which is never set - Leading to null pointer exceptions when the device is accessed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 29be47fcd6a0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38301?
CVE-2025-38301 has been assessed with a low severity level due to its limited impact on the overall system.
How do I fix CVE-2025-38301?
To fix CVE-2025-38301, update to the latest version of the Linux kernel that includes the fix for this vulnerability.
What systems are affected by CVE-2025-38301?
CVE-2025-38301 affects the Linux kernel, particularly in the nvmem component.
What does the CVE-2025-38301 vulnerability involve?
CVE-2025-38301 involves an unbreak driver issue in the Linux kernel's nvmem subsystem that was addressed in a recent commit.
Is there any risk of exploitation associated with CVE-2025-38301?
The risk of exploitation for CVE-2025-38301 is minimal due to its low severity and specific nature of the vulnerability.