CVE-2025-38070: ASoC: sma1307: Add NULL check in sma1307_setting_loaded()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-18 · updated 2026-06-17
Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: Add NULL check in sma1307_setting_loaded() All varibale allocated by kzalloc and devm_kzalloc could be NULL. Multiple pointer checks and their cleanup are added. This issue is found by our static analysis tool

Affected products

Linux kernel: from 6.13 before 6.14.9 — fixed in 6.14.9

How to fix

Upgrade to a fixed version: Linux kernel 6.14.9. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/0ec6bd16705fe21d6429d6b8f7981eae2142bba8
https://git.kernel.org/stable/c/f8434b8ba437d3f6cbcd9ffe8405bd16ed28fc5c

Get alerted when CVE-2025-38070 or the next vulnerability affects your stack