PT-2025-33574 · Linux+4 · Linux Kernel+4
Published
2025-06-29
·
Updated
2026-04-27
·
CVE-2025-38531
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The Linux kernel contains a flaw where the
indio dev->dev structure is used before initialization in various probe functions. This can lead to a kernel panic when functions like devm regulator bulk get enable() fail and subsequently call dev err probe() with the uninitialized device. The issue affects functions such as dev err probe(), dev err(), dev warn(), and dev info().Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use of Uninitialized Resource
Access of Uninitialized Pointer
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu