CVE-2025-38487

soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled

MEDIUM

5.5

CVSS Score

Published: July 28, 2025 at 11:21 AM UTC

Updated: June 17, 2026 at 09:16 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled Mitigate e.g. the following: # echo 1e789080.lpc-snoop > /sys/bus/platform/drivers/aspeed-lpc-snoop/unbind ... [ 120.363594] Unable to handle kernel NULL pointer dereference at virtual address 00000004 when write [ 120.373866] [00000004] *pgd=00000000 [ 120.377910] Internal error: Oops: 805 [#1] SMP ARM [ 120.383306] CPU: 1 UID: 0 PID: 315 Comm: sh Not tainted 6.15.0-rc1-00009-g926217bc7d7d-dirty #20 NONE ... [ 120.679543] Call trace: [ 120.679559] misc_deregister from aspeed_lpc_snoop_remove+0x84/0xac [ 120.692462] aspeed_lpc_snoop_remove from platform_remove+0x28/0x38 [ 120.700996] platform_remove from device_release_driver_internal+0x188/0x200 ...

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

4.13 ≤ v < 5.10.2414.13 ≤ v < 5.15.1904.13 ≤ v < 5.4.2974.13 ≤ v < 6.1.1474.13 ≤ v < 6.12.404.13 ≤ v < 6.15.84.13 ≤ v < 6.164.13 ≤ v < 6.6.1005.11 ≤ v < 5.15.1905.16 ≤ v < 6.1.1475.5 ≤ v < 5.10.2416.13 ≤ v < 6.15.86.2 ≤ v < 6.6.1006.7 ≤ v < 6.12.404.13 6.16 rc1 6.16 rc2 6.16 rc3 6.16 rc4 6.16 rc5 6.16 rc69f4f9ae81d0affc182f54dd00285ddb90e0b3ae1

Vendor states this is fixed in 166afe964e8433d52c641f5d1c09102bacee9a92 (fixed)

Vendor states this is fixed in 329a80adc0e5f815d0514a6d403aaaf0995cd9be (fixed)

Vendor states this is fixed in 56448e78a6bb4e1a8528a0e2efe94eff0400c247 (fixed)

Vendor states this is fixed in 62e51f51d97477ea4e78c82e7076a171dac86c75 (fixed)

Vendor states this is fixed in 9e1d2b97f5e2a36a2fd30a8bd30ead9dac5e3a51 (fixed)

Vendor states this is fixed in ac10ed9862104936a412f8b475c869e99f048448 (fixed)

Vendor states this is fixed in b361598b7352f02456619a6105c7da952ef69f8f (fixed)

Vendor states this is fixed in dc5598482e2d3b234f6d72d6f5568e24f603e51a (fixed)

Vendor states this is fixed in 4.13 (unaffected)

Vendor states this is fixed in 5.10.241 (unaffected)

Vendor states this is fixed in 5.15.190 (unaffected)

Vendor states this is fixed in 5.4.297 (unaffected)