CVE-2025-38381 | Linux Kernel up to 6.12.36/6.15.5/6.16-rc4 cs40l50-vibra cs40l50_upload_owt null pointer dereference

July 25, 2025 Yanac

A vulnerability was found in Linux Kernel up to 6.12.36/6.15.5/6.16-rc4. It has been rated as critical. Affected by this issue is the function cs40l50_upload_owt of the component cs40l50-vibra. The manipulation leads to null pointer dereference.

This vulnerability is handled as CVE-2025-38381. The attack can only be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More