In the Linux kernel, the following vulnerability has been resolved:
soc: aspeed: Add NULL check in aspeedlpcenable_snoop()
devmkasprintf() returns NULL when memory allocation fails. Currently, aspeedlpcenablesnoop() does not check for this case, which results in a NULL pointer dereference.
Add NULL check after devm_kasprintf() to prevent this issue.
[arj: Fix Fixes: tag to use subject from 3772e5da4454]
[
{
"digest": {
"length": 1216.0,
"function_hash": "96849482538079174085708527358232874340"
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c",
"function": "aspeed_lpc_enable_snoop"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c550999f939b529d28a914d5034cc4290066aea6",
"id": "CVE-2025-38145-1296d62b",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"193356126534197374422604174753342086836",
"310834623647141548718335800045465243253",
"271336270126261455826066226878863330515",
"118998933157375563486189335203880730953",
"322838439285659188841332663693439938844",
"235016894976277958762287338061913156112",
"89276361128980822714257072776066515276",
"298899727523233816059016950124693733994",
"138987180534468346218396463387832889530",
"155582042329636399181468731129766166126",
"10159363312468416494411373139083858061",
"118587283750420520545474676207591789115",
"135145948087578231144229802481117897535",
"314004803590576669845674667878339522975",
"202470090989684169877572642302474346318",
"278752340954642355052443402446354052385"
],
"threshold": 0.9
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c550999f939b529d28a914d5034cc4290066aea6",
"id": "CVE-2025-38145-69c74fa1",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"digest": {
"length": 1216.0,
"function_hash": "96849482538079174085708527358232874340"
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c",
"function": "aspeed_lpc_enable_snoop"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fd889c145722579aa038c31cbc07cfdd4d75166",
"id": "CVE-2025-38145-9f73528d",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"193356126534197374422604174753342086836",
"310834623647141548718335800045465243253",
"271336270126261455826066226878863330515",
"118998933157375563486189335203880730953",
"322838439285659188841332663693439938844",
"235016894976277958762287338061913156112",
"89276361128980822714257072776066515276",
"298899727523233816059016950124693733994",
"138987180534468346218396463387832889530",
"155582042329636399181468731129766166126",
"10159363312468416494411373139083858061",
"118587283750420520545474676207591789115",
"135145948087578231144229802481117897535",
"314004803590576669845674667878339522975",
"202470090989684169877572642302474346318",
"278752340954642355052443402446354052385"
],
"threshold": 0.9
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fd889c145722579aa038c31cbc07cfdd4d75166",
"id": "CVE-2025-38145-a439038a",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"digest": {
"length": 1216.0,
"function_hash": "96849482538079174085708527358232874340"
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c",
"function": "aspeed_lpc_enable_snoop"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f697ef117ecbf3a367dfc559a6a3589905956530",
"id": "CVE-2025-38145-db243efa",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"193356126534197374422604174753342086836",
"310834623647141548718335800045465243253",
"271336270126261455826066226878863330515",
"118998933157375563486189335203880730953",
"322838439285659188841332663693439938844",
"235016894976277958762287338061913156112",
"89276361128980822714257072776066515276",
"298899727523233816059016950124693733994",
"138987180534468346218396463387832889530",
"155582042329636399181468731129766166126",
"10159363312468416494411373139083858061",
"118587283750420520545474676207591789115",
"135145948087578231144229802481117897535",
"314004803590576669845674667878339522975",
"202470090989684169877572642302474346318",
"278752340954642355052443402446354052385"
],
"threshold": 0.9
},
"target": {
"file": "drivers/soc/aspeed/aspeed-lpc-snoop.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f697ef117ecbf3a367dfc559a6a3589905956530",
"id": "CVE-2025-38145-f7750aa3",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
}
]