CVE-2025-21982

pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw

Medium · published April 1, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw

devm_kasprintf() calls can return null pointers on failure.

But the return values were not checked in npcm8xx_gpio_fw().

Add NULL check in npcm8xx_gpio_fw(), to handle kernel NULL

pointer dereference error.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.8th percentile
Published
2025-04-01T15:47Z
EPSS history
Timeline
  • 01 APR 15:47Z
    pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
    cvelistv5