CVE-2025-38547: iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: axp20xadc: Add missing sentinel to AXP717 ADC channel maps
The AXP717 ADC channel maps is missing a sentinel entry at the end. This causes a KASAN warning.
Add the missing sentinel entry.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-aws-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1017.17~24.04.1 - Upgrade
Upgrade
ubuntu/linux-azure-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1017.17~24.04.1 - Upgrade
Upgrade
ubuntu/linux-gcp-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1020.21~24.04.1 - Upgrade
Upgrade
ubuntu/linux-oem-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1016.16 - Upgrade
Upgrade
ubuntu/linux-oracle-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1017.17~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-36.36.1~24.04.1 - Upgrade
Upgrade
ubuntu/linux-realtime-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1016.16~24.04.1 - Configuration
Add the missing sentinel entry at the end of the AXP717 ADC channel maps to prevent the KASAN warning.
Linux kernel iio: adc: axp20x_adc AXP717 ADC channel maps = add missing sentinel entry
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38547?
The severity of CVE-2025-38547 is considered to be low as it primarily causes a KASAN warning without affecting the functionality.
How do I fix CVE-2025-38547?
To fix CVE-2025-38547, update to the latest version of the Linux kernel where the missing sentinel has been added.
Which systems are affected by CVE-2025-38547?
CVE-2025-38547 affects the Linux kernel, specifically related to the AXP717 ADC channel maps.
Is CVE-2025-38547 exploitable?
CVE-2025-38547 is not considered exploitable, as it leads to a warning rather than a security compromise.
What component of the Linux kernel is impacted by CVE-2025-38547?
CVE-2025-38547 impacts the iio: adc: axp20x_adc component within the Linux kernel.