CVE-2025-38274

fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()

published July 10, 2025

CVSS
—
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()

fpga_mgr_test_img_load_sgt() allocates memory for sgt using

kunit_kzalloc() however it does not check if the allocation failed.

It then passes sgt to sg_alloc_table(), which passes it to

__sg_alloc_table(). This function calls memset() on sgt in an attempt to

zero it out. If the allocation fails then sgt will be NULL and the

memset will trigger a NULL pointer dereference.

Fix this by checking the allocation with KUNIT_ASSERT_NOT_ERR_OR_NULL().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.0th percentile
Published
2025-07-10T07:41Z
EPSS history
Timeline
  • 10 JUL 07:41Z
    fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
    cvelistv5