What’s Vulnerable › Vulnerabilities

CVE-2025-38634: power: supply: cpcap-charger: Fix null check for power_supply_get_by_name

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-22 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-charger: Fix null check for power_supply_get_by_name In the cpcap_usb_detect() function, the power_supply_get_by_name() function may return `NULL` instead of an error pointer. To prevent potential null pointer dereferences, Added a null check.

Affected products

• Debian Linux: 11.0
• Linux kernel: from 5.14 before 5.15.190; from 5.16 before 6.1.148; from 6.2 before 6.6.102; from 6.7 before 6.12.42; from 6.13 before 6.15.10; from 6.16 before 6.16.1 — fixed in 5.15.190, 6.1.148, 6.12.42, 6.15.10, 6.16.1, 6.6.102

How to fix

Upgrade to a fixed version: Linux kernel 5.15.190, 6.1.148, 6.12.42, 6.15.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/27001e4f146624c4b3389b029bdc0f8049819560
• https://git.kernel.org/stable/c/4ebbb9106aaa2fd58e0359bc3a2490953db2ef0c
• https://git.kernel.org/stable/c/8e9bdb563916287ba1b4258812434e0585ac6d00
• https://git.kernel.org/stable/c/9784d832d7c103539cd9afb376534eaa35815d3d
• https://git.kernel.org/stable/c/a2436263144980cc99a9860c7b43335847afbe53
• https://git.kernel.org/stable/c/d9fa3aae08f99493e67fb79413c0e95d30fca5e9
• https://git.kernel.org/stable/c/f642500aa7ed93d2606e4f929244cce9c7467b3a
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html

Get alerted when CVE-2025-38634 or the next vulnerability affects your stack