CVE Database
/

CVE-2025-38274

Back to search

CVE-2025-38274

Published: Jul 10, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() fpga_mgr_test_img_load_sgt() allocates memory for sgt using kunit_kzalloc() however it does not check if the allocation failed. It then passes sgt to sg_alloc_table(), which passes it to __sg_alloc_table(). This function calls memset() on sgt in an attempt to zero it out. If the allocation fails then sgt will be NULL and the memset will trigger a NULL pointer dereference. Fix this by checking the allocation with KUNIT_ASSERT_NOT_ERR_OR_NULL().

VendorProductVersions

Linux

Linux

affected
ccbc1c302115d8125d6a96296ba52702c6de0ade - < e69e2cfd8b38d9463a250e153ef4963a604d61e9
affected
ccbc1c302115d8125d6a96296ba52702c6de0ade - < 8b2230ac7ff0aeb2441132df638a82ab124f8624
affected
ccbc1c302115d8125d6a96296ba52702c6de0ade - < eb4c74eaa6e2d15f3bbd32941c9d2a25b29a718d
affected
ccbc1c302115d8125d6a96296ba52702c6de0ade - < 6ebf1982038af12f3588417e4fd0417d2551da28

Linux

Linux

affected
6.6
unaffected
0 - < 6.6
unaffected
6.6.94 - <= 6.6.*
unaffected
6.12.34 - <= 6.12.*
unaffected
6.15.3 - <= 6.15.*

+1 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now