CVE-2025-38573: spi: cs42l43: Property entry should be a null-terminated array
In the Linux kernel, the following vulnerability has been resolved:
spi: cs42l43: Property entry should be a null-terminated array
The software node does not specify a count of property entries, so the array must be null-terminated.
When unterminated, this can lead to a fault in the downstream cs35l56 amplifier driver, because the node parse walks off the end of the array into unknown memory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38573?
CVE-2025-38573 has a moderate severity rating due to the potential for faults in the Linux kernel.
How do I fix CVE-2025-38573?
To fix CVE-2025-38573, update to the latest version of the Linux kernel where the vulnerability has been resolved.
What components are affected by CVE-2025-38573?
CVE-2025-38573 affects the Linux kernel specifically related to the 'spi: cs42l43' component.
What are the potential impacts of CVE-2025-38573?
The potential impacts of CVE-2025-38573 include system faults due to unterminated arrays.
Is there a workaround for CVE-2025-38573?
There are no specified workarounds for CVE-2025-38573; updating the kernel is the recommended approach.