CVE-2025-40224

CVE-2025-40224

published December 4, 2025

CVSS
—
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()

The driver allocates memory for sensor data using devm_kzalloc(), but

did not check if the allocation succeeded. In case of memory allocation

failure, dereferencing the NULL pointer would lead to a kernel crash.

Add a NULL pointer check and return -ENOMEM to handle allocation failure

properly.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.8th percentile
Published
2025-12-04T21:16Z
References (2)
EPSS history
Timeline
  • 04 DEC 15:31Z
    hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()
    cvelistv5