CVE-2025-40156

PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()

N/A
Published: November 12, 2025 at 10:23 AM UTC
Updated: October 19, 2026 at 09:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() The drv->sram_reg pointer could be set to ERR_PTR(-EPROBE_DEFER) which would lead to a error pointer dereference. Use IS_ERR_OR_NULL() to check that the pointer is valid.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.1e09bd5757b5227d6804b30c58d4587f7f87d1afa
Vendor states this is fixed in 24d61b6e23d2c7291c528dd43a0bf76b5c05c8f0 (fixed)
Vendor states this is fixed in 44e32104cf7e670e3d683c97b52350d8fac23322 (fixed)
Vendor states this is fixed in 80eab6a9df7e1107dc334434dbacd05297703377 (fixed)
Vendor states this is fixed in 9cc23e221f392304b7b8aad213812564ddf6517e (fixed)
Vendor states this is fixed in fc33bf0e097c6834646b98a7b3da0ae5b617f0f9 (fixed)
Vendor states this is fixed in 6.1 (unaffected)
Vendor states this is fixed in 6.1.156 (unaffected)
Vendor states this is fixed in 6.12.53 (unaffected)
Vendor states this is fixed in 6.17.3 (unaffected)
Vendor states this is fixed in 6.18 (unaffected)
Vendor states this is fixed in 6.6.112 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card