CVE-2025-38274
Published: Jul 10, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() fpga_mgr_test_img_load_sgt() allocates memory for sgt using kunit_kzalloc() however it does not check if the allocation failed. It then passes sgt to sg_alloc_table(), which passes it to __sg_alloc_table(). This function calls memset() on sgt in an attempt to zero it out. If the allocation fails then sgt will be NULL and the memset will trigger a NULL pointer dereference. Fix this by checking the allocation with KUNIT_ASSERT_NOT_ERR_OR_NULL().
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected ccbc1c302115d8125d6a96296ba52702c6de0ade - < e69e2cfd8b38d9463a250e153ef4963a604d61e9affected ccbc1c302115d8125d6a96296ba52702c6de0ade - < 8b2230ac7ff0aeb2441132df638a82ab124f8624affected ccbc1c302115d8125d6a96296ba52702c6de0ade - < eb4c74eaa6e2d15f3bbd32941c9d2a25b29a718daffected ccbc1c302115d8125d6a96296ba52702c6de0ade - < 6ebf1982038af12f3588417e4fd0417d2551da28 |
Linux | Linux | affected 6.6unaffected 0 - < 6.6unaffected 6.6.94 - <= 6.6.*unaffected 6.12.34 - <= 6.12.*unaffected 6.15.3 - <= 6.15.*+1 more versions |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now