Description

In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wled_configure() devm_kasprintf() returns NULL when memory allocation fails. Currently, wled_configure() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue.

INFO

Published Date :

2025-07-03T08:35:44.224Z

Last Modified :

2025-11-03T17:34:33.856Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-38143 vulnerability.

Vendors Products
Debian
  • Debian Linux
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-38143.

URL Resource
https://git.kernel.org/stable/c/1be2000b703b02e149f8f2061054489f6c18c972 cve-icon cve-icon
https://git.kernel.org/stable/c/21528806560510458378ea52c37e35b0773afaea cve-icon cve-icon
https://git.kernel.org/stable/c/4a715be3fe80b68fa55cb3569af3d294be101626 cve-icon cve-icon
https://git.kernel.org/stable/c/6a56446595730a5e3f06a30902e23cb037d28146 cve-icon cve-icon
https://git.kernel.org/stable/c/9d06ac32c202142da40904180f2669ed4f5073ac cve-icon cve-icon
https://git.kernel.org/stable/c/e12d3e1624a02706cdd3628bbf5668827214fa33 cve-icon cve-icon
https://git.kernel.org/stable/c/fde314445332015273c8f51d2659885c606fe135 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html cve-icon
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html cve-icon
https://lore.kernel.org/linux-cve-announce/2025070334-CVE-2025-38143-09c4@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-38143 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-38143 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact