PT-2025-25844 · Linux+4 · Linux Kernel+4

Published 2025-03-16 · Updated 2026-05-26 · CVE-2025-38070

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue concerned the ASoC: sma1307 component, where variables allocated by kzalloc and devm kzalloc could potentially be NULL, leading to problems. To address this, NULL checks were added in the sma1307 setting loaded() function, along with multiple pointer checks and their cleanup. This issue was discovered using a static analysis tool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-01383

CVE-2025-38070

ECHO-6850-362A-AE0F

USN-7769-1

USN-7769-2

USN-7769-3

USN-7770-1

USN-7771-1

USN-7789-1

USN-7789-2

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Ubuntu

References · 216

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38070.json · Exploit
• https://ubuntu.com/security/CVE-2025-38151 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38038 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38099 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7771-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38119 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38037 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38096 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38306 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38272 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38070 · Security Note
• https://ubuntu.com/security/CVE-2025-38040 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7769-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38032 · Vendor Advisory