PT-2025-30868 · Linux+5 · Linux Kernel+5

Publicado 2025-07-03 · Atualizado 2025-12-15 · CVE-2025-38454

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the ALSA subsystem related to the ad1816a driver. A potential NULL pointer dereference exists in the snd card ad1816a pnp() function. The issue is addressed by using pr warn() instead of dev warn() when the 'pdev' pointer is NULL, preventing the dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2025-11502

CVE-2025-38454

DSA-5975-1

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7934-1

Produtos afetados

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

Ad1816A

Referências · 1486

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38454.json · Exploit
• https://bugzilla.suse.com/1250242 · Nota
• https://suse.com/security/cve/CVE-2025-38449 · Nota
• https://suse.com/security/cve/CVE-2025-38222 · Nota
• https://suse.com/security/cve/CVE-2025-38436 · Nota
• https://suse.com/security/cve/CVE-2025-38352 · Nota
• https://bugzilla.suse.com/1247091 · Nota
• https://bugzilla.suse.com/1247164 · Nota
• https://suse.com/security/cve/CVE-2025-38373 · Nota
• https://bugzilla.suse.com/1246286 · Nota
• https://bugzilla.suse.com/1249274 · Nota
• https://ubuntu.com/security/CVE-2025-38578 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-38201 · Nota
• https://suse.com/security/cve/CVE-2025-39861 · Nota
• https://bugzilla.suse.com/1247265 · Nota