CVE-2025-38648

spi: stm32: Check for cfg availability in stm32_spi_probe

published August 22, 2025

CVSS
—
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

spi: stm32: Check for cfg availability in stm32_spi_probe

The stm32_spi_probe function now includes a check to ensure that the

pointer returned by of_device_get_match_data is not NULL before

accessing its members. This resolves a warning where a potential NULL

pointer dereference could occur when accessing cfg->has_device_mode.

Before accessing the 'has_device_mode' member, we verify that 'cfg' is

not NULL. If 'cfg' is NULL, an error message is logged.

This change ensures that the driver does not attempt to access

configuration data if it is not available, thus preventing a potential

system crash due to a NULL pointer dereference.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00165 · 5.5th percentile
Published
2025-08-22T16:00Z
EPSS history
Timeline
  • 22 AUG 16:00Z
    spi: stm32: Check for cfg availability in stm32_spi_probe
    cvelistv5