CVE-2025-40015

Published: Oct 20, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: media: stm32-csi: Fix dereference before NULL check In 'stm32_csi_start', 'csidev->s_subdev' is dereferenced directly while assigning a value to the 'src_pad'. However the same value is being checked against NULL at a later point of time indicating that there are chances that the value can be NULL. Move the dereference after the NULL check.

Vendor	Product	Versions
Linux	Linux	affected `e7bad98c205d17c745de9d83ebf73e53cbf99d48 - < 1f053d82e59c785b2b939cbed12f13657f84b296` affected `e7bad98c205d17c745de9d83ebf73e53cbf99d48 - < 4eeafff163e80d576c5efc1360ae310c0ceedd02` affected `e7bad98c205d17c745de9d83ebf73e53cbf99d48 - < 80eaf32672871bd2623ce6ba13ffc1f018756580`
Linux	Linux	affected `6.15` unaffected `0 - < 6.15` unaffected `6.16.11 - <= 6.16.` unaffected `6.17.1 - <= 6.17.` unaffected `6.18 - <= *`

References

https://git.kernel.org/stable/c/1f053d82e59c785b2b939cbed12f13657f84b296

https://git.kernel.org/stable/c/4eeafff163e80d576c5efc1360ae310c0ceedd02

https://git.kernel.org/stable/c/80eaf32672871bd2623ce6ba13ffc1f018756580

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-40015

Description

Affected Products

References