PT-2025-30868 · Linux+5 · Linux Kernel+5

Published 2025-07-03 · Updated 2025-12-15 · CVE-2025-38454

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the ALSA subsystem related to the ad1816a driver. A potential NULL pointer dereference exists in the snd card ad1816a pnp() function. The issue is addressed by using pr warn() instead of dev warn() when the 'pdev' pointer is NULL, preventing the dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-11502

CVE-2025-38454

DSA-5975-1

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7934-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

Ad1816A

References · 1486

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38454.json · Exploit
• https://ubuntu.com/security/CVE-2025-38578 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38553 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38527 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38524 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-38454 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38671 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38544 · Vendor Advisory
• https://git.kernel.org/stable/c/e14bffc90866596ba19ffe549f199d7870da4241 · Patch
• https://ubuntu.com/security/CVE-2025-38484 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38632 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38481 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38546 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38534 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38335 · Vendor Advisory