CVE-2025-38301

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38301
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38301.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38301
Downstream
Published
2025-07-10T07:42:13Z
Modified
2025-10-15T15:17:50.861585Z
Summary
nvmem: zynqmp_nvmem: unbreak driver after cleanup
Details

In the Linux kernel, the following vulnerability has been resolved:

nvmem: zynqmp_nvmem: unbreak driver after cleanup

Commit 29be47fcd6a0 ("nvmem: zynqmpnvmem: zynqmpnvmemprobe cleanup") changed the driver to expect the device pointer to be passed as the "context", but in nvmem the context parameter comes from nvmemconfig.priv which is never set - Leading to null pointer exceptions when the device is accessed.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
29be47fcd6a06ea2e79eeeca6e69ad1e23254a69
Fixed
c8bb1bcea877446f86922a8fd1661b8c07d90e5c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
29be47fcd6a06ea2e79eeeca6e69ad1e23254a69
Fixed
3728101f56ef54425a11027a3ddc2c3941d60b71
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
29be47fcd6a06ea2e79eeeca6e69ad1e23254a69
Fixed
fe8abdd175d7b547ae1a612757e7902bcd62e9cf

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.3
v6.12.30
v6.12.31
v6.12.32
v6.12.33
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.15
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.15-rc7
v6.15.1
v6.15.2
v6.8
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

{
    "vanir_signatures": [
        {
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe8abdd175d7b547ae1a612757e7902bcd62e9cf",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "244731609263628086509021626241632603736",
                    "118491590306540055370109001350838279385",
                    "254200083941527243098604272217756651388",
                    "88281080637011253976932935844258753448"
                ]
            },
            "id": "CVE-2025-38301-11b6acee",
            "target": {
                "file": "drivers/nvmem/zynqmp_nvmem.c"
            },
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe8abdd175d7b547ae1a612757e7902bcd62e9cf",
            "signature_type": "Function",
            "digest": {
                "function_hash": "51531565400257773876454260376676777185",
                "length": 441.0
            },
            "id": "CVE-2025-38301-1a0cf60f",
            "target": {
                "file": "drivers/nvmem/zynqmp_nvmem.c",
                "function": "zynqmp_nvmem_probe"
            },
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8bb1bcea877446f86922a8fd1661b8c07d90e5c",
            "signature_type": "Function",
            "digest": {
                "function_hash": "51531565400257773876454260376676777185",
                "length": 441.0
            },
            "id": "CVE-2025-38301-237ce513",
            "target": {
                "file": "drivers/nvmem/zynqmp_nvmem.c",
                "function": "zynqmp_nvmem_probe"
            },
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8bb1bcea877446f86922a8fd1661b8c07d90e5c",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "244731609263628086509021626241632603736",
                    "118491590306540055370109001350838279385",
                    "254200083941527243098604272217756651388",
                    "88281080637011253976932935844258753448"
                ]
            },
            "id": "CVE-2025-38301-85a2d540",
            "target": {
                "file": "drivers/nvmem/zynqmp_nvmem.c"
            },
            "deprecated": false,
            "signature_version": "v1"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.9.0
Fixed
6.12.34
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.3