What’s Vulnerable › Vulnerabilities

CVE-2025-23146: mfd: ene-kb3930: Fix a potential NULL pointer dereference

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-01 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer dereference The off_gpios could be NULL. Add missing check in the kb3930_probe(). This is similar to the issue fixed in commit b1ba8bcb2d1f ("backlight: hx8357: Fix potential NULL pointer dereference"). This was detected by our static analysis tool.

Affected products

• Debian Linux: 11.0
• Linux kernel: from 5.10 before 5.10.237; from 5.11 before 5.15.181; from 5.16 before 6.1.135; from 6.2 before 6.6.88; from 6.7 before 6.12.24; from 6.13 before 6.13.12 — fixed in 5.10.237, 5.15.181, 6.1.135, 6.12.24, 6.13.12, 6.14.3

How to fix

Upgrade to a fixed version: Linux kernel 5.10.237, 5.15.181, 6.1.135, 6.12.24. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2edb5b29b197d90b4d08cd45e911c0bcf24cb895
• https://git.kernel.org/stable/c/4cdf1d2a816a93fa02f7b6b5492dc7f55af2a199
• https://git.kernel.org/stable/c/6dc88993ee3fa8365ff6a5d6514702f70ba6863a
• https://git.kernel.org/stable/c/76d0f4199bc5b51acb7b96c6663a8953543733ad
• https://git.kernel.org/stable/c/7b47df6498f223c8956bfe0d994a0e42a520dfcd
• https://git.kernel.org/stable/c/90ee23c2514a22a9c2bb39a540cbe1c9acb27d0b
• https://git.kernel.org/stable/c/b1758417310d2cc77e52cd15103497e52e2614f6
• https://git.kernel.org/stable/c/ea07760676bba49319d553af80c239da053b5fb1
• https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Get alerted when CVE-2025-23146 or the next vulnerability affects your stack