CVE-2025-38629
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38629
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38629.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-38629
- Downstream
- Published
- 2025-08-22T16:00:37.747Z
- Modified
- 2025-11-27T19:34:05.309503Z
- Summary
- ALSA: usb: scarlett2: Fix missing NULL check
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb: scarlett2: Fix missing NULL check
scarlett2inputselectctlinfo() sets up the string arrays allocated via kasprintf(), but it misses NULL checks, which may lead to NULL dereference Oops. Let's add the proper NULL check.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/blob/ee626f5d79d5817bb21d6f048dc0da4c4e383443/cves/2025/38xxx/CVE-2025-38629.json", "cna_assigner": "Linux" }- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8eba063b5b2b498ddd01ea6f29fc9b12368c3d53Fixedd558db85920b124bac36f8a7ddc5de0aa7491bdd
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8eba063b5b2b498ddd01ea6f29fc9b12368c3d53Fixed2c735fcaee81ad8056960659dc9dc460891e76b0
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8eba063b5b2b498ddd01ea6f29fc9b12368c3d53Fixeddf485a4b2b3ee5b35c80f990beb554e38a8a5fb1