CVE-2025-38629

ALSA: usb: scarlett2: Fix missing NULL check

published August 22, 2025

CVSS
—
EPSS
0%
Percentile
5.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb: scarlett2: Fix missing NULL check

scarlett2_input_select_ctl_info() sets up the string arrays allocated

via kasprintf(), but it misses NULL checks, which may lead to NULL

dereference Oops. Let's add the proper NULL check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00165 · 5.4th percentile
Published
2025-08-22T16:00Z
EPSS history
Timeline
  • 22 AUG 16:00Z
    ALSA: usb: scarlett2: Fix missing NULL check
    cvelistv5