CVE-2025-40224: hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (cgbc-hwmon) Add missing NULL check after devmkzalloc()
The driver allocates memory for sensor data using devmkzalloc(), but did not check if the allocation succeeded. In case of memory allocation failure, dereferencing the NULL pointer would lead to a kernel crash.
Add a NULL pointer check and return -ENOMEM to handle allocation failure properly.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40224?
CVE-2025-40224 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-40224?
To fix CVE-2025-40224, update to the latest version of the Linux kernel that includes the necessary patch.
What impact does CVE-2025-40224 have on system performance?
CVE-2025-40224 could lead to potential system instability due to unhandled memory allocation failures.
Is CVE-2025-40224 exploitable remotely?
CVE-2025-40224 is not considered remotely exploitable as it pertains to local driver code in the Linux kernel.
What software versions are affected by CVE-2025-40224?
CVE-2025-40224 affects various versions of the Linux kernel that utilize the hwmon subsystem.