SB2025070447 - NULL pointer dereference in Linux kernel soc aspeed driver
Published: July 4, 2025
Security Bulletin ID
SB2025070447
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2025-38145)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the aspeed_lpc_enable_snoop() function in drivers/soc/aspeed/aspeed-lpc-snoop.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1fd889c145722579aa038c31cbc07cfdd4d75166
- https://git.kernel.org/stable/c/2beee9cf833374550e673d428ad8b6ab37c175b3
- https://git.kernel.org/stable/c/45b2e8b0fdd280aba04c3cc869e9ae500c44e4b7
- https://git.kernel.org/stable/c/8312b1f776f71979bf33bda7acc05b348e8792c7
- https://git.kernel.org/stable/c/c550999f939b529d28a914d5034cc4290066aea6
- https://git.kernel.org/stable/c/d62a589eaaec6385e3e2b25cf5a28b4560ace93f
- https://git.kernel.org/stable/c/f1706e0e1a74b095cbc60375b9b1e6205f5f4c98
- https://git.kernel.org/stable/c/f697ef117ecbf3a367dfc559a6a3589905956530