← Database

CVE-2025-38629

MEDIUM CVSS: 5.5 Published: 2025-08-22 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: scarlett2: Fix missing NULL check scarlett2_input_select_ctl_info() sets up the string arrays allocated via kasprintf(), but it misses NULL checks, which may lead to NULL dereference Oops. Let's add the proper NULL check.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-476

References