CVE-2025-40015

CVE-2025-40015

published October 20, 2025

CVSS
—
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: stm32-csi: Fix dereference before NULL check

In 'stm32_csi_start', 'csidev->s_subdev' is dereferenced directly while

assigning a value to the 'src_pad'. However the same value is being

checked against NULL at a later point of time indicating that there

are chances that the value can be NULL.

Move the dereference after the NULL check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Published
2025-10-20T20:15Z
References (3)
EPSS history
Timeline
  • 20 OCT 15:29Z
    media: stm32-csi: Fix dereference before NULL check
    cvelistv5