CVE - CVE-2025-38275

CVE-ID
CVE-2025-38275	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug The qmp_usb_iomap() helper function currently returns the raw result of devm_ioremap() for non-exclusive mappings. Since devm_ioremap() may return a NULL pointer and the caller only checks error pointers with IS_ERR(), NULL could bypass the check and lead to an invalid dereference. Fix the issue by checking if devm_ioremap() returns NULL. When it does, qmp_usb_iomap() now returns an error pointer via IOMEM_ERR_PTR(-ENOMEM), ensuring safe and consistent error handling.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0b979a409e40457ca1b5cb48755d1f34eee58805 URL:https://git.kernel.org/stable/c/0b979a409e40457ca1b5cb48755d1f34eee58805 MISC:https://git.kernel.org/stable/c/0c33117f00c8c5363c22676931b22ae5041f7603 URL:https://git.kernel.org/stable/c/0c33117f00c8c5363c22676931b22ae5041f7603 MISC:https://git.kernel.org/stable/c/127dfb4f1c5a2b622039c5d203f321380ea36665 URL:https://git.kernel.org/stable/c/127dfb4f1c5a2b622039c5d203f321380ea36665 MISC:https://git.kernel.org/stable/c/5072c1749197fc28b27d7efc0d80320d7cac9572 URL:https://git.kernel.org/stable/c/5072c1749197fc28b27d7efc0d80320d7cac9572 MISC:https://git.kernel.org/stable/c/d14402a38c2d868cacb1facaf9be908ca6558e59 URL:https://git.kernel.org/stable/c/d14402a38c2d868cacb1facaf9be908ca6558e59
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)