CVE-2025-23146

mfd: ene-kb3930: Fix a potential NULL pointer dereference

MEDIUM

5.5

CVSS Score

Published: May 1, 2025 at 12:55 PM UTC

Updated: June 17, 2026 at 08:52 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer dereference The off_gpios could be NULL. Add missing check in the kb3930_probe(). This is similar to the issue fixed in commit b1ba8bcb2d1f ("backlight: hx8357: Fix potential NULL pointer dereference"). This was detected by our static analysis tool.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

5.10 ≤ v < 5.10.2375.10 ≤ v < 5.15.1815.10 ≤ v < 6.1.1355.10 ≤ v < 6.12.245.10 ≤ v < 6.13.125.10 ≤ v < 6.14.35.10 ≤ v < 6.155.10 ≤ v < 6.6.885.11 ≤ v < 5.15.1815.16 ≤ v < 6.1.1356.13 ≤ v < 6.13.126.14 ≤ v < 6.14.36.2 ≤ v < 6.6.886.7 ≤ v < 6.12.245.10ede6b2d1dfc0d6a7b0b3161a2e911d464e28e0ad

Vendor states this is fixed in 2edb5b29b197d90b4d08cd45e911c0bcf24cb895 (fixed)

Vendor states this is fixed in 4cdf1d2a816a93fa02f7b6b5492dc7f55af2a199 (fixed)

Vendor states this is fixed in 6dc88993ee3fa8365ff6a5d6514702f70ba6863a (fixed)

Vendor states this is fixed in 76d0f4199bc5b51acb7b96c6663a8953543733ad (fixed)

Vendor states this is fixed in 7b47df6498f223c8956bfe0d994a0e42a520dfcd (fixed)

Vendor states this is fixed in 90ee23c2514a22a9c2bb39a540cbe1c9acb27d0b (fixed)

Vendor states this is fixed in b1758417310d2cc77e52cd15103497e52e2614f6 (fixed)

Vendor states this is fixed in ea07760676bba49319d553af80c239da053b5fb1 (fixed)

Vendor states this is fixed in 5.10 (unaffected)

Vendor states this is fixed in 5.10.237 (unaffected)

Vendor states this is fixed in 5.15.181 (unaffected)

Vendor states this is fixed in 6.1.135 (unaffected)