What’s Vulnerable › Vulnerabilities

CVE-2025-40015: media: stm32-csi: Fix dereference before NULL check

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-20 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: media: stm32-csi: Fix dereference before NULL check In 'stm32_csi_start', 'csidev->s_subdev' is dereferenced directly while assigning a value to the 'src_pad'. However the same value is being checked against NULL at a later point of time indicating that there are chances that the value can be NULL. Move the dereference after the NULL check.

Affected products

• Linux kernel: 6.15 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1f053d82e59c785b2b939cbed12f13657f84b296
• https://git.kernel.org/stable/c/4eeafff163e80d576c5efc1360ae310c0ceedd02
• https://git.kernel.org/stable/c/80eaf32672871bd2623ce6ba13ffc1f018756580

Get alerted when CVE-2025-40015 or the next vulnerability affects your stack