CVE-2025-40015

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: media: stm32-csi: Fix dereference before NULL check In 'stm32_csi_start', 'csidev->s_subdev' is dereferenced directly while assigning a value to the 'src_pad'. However the same value is being checked against NULL at a later point of time indicating that there are chances that the value can be NULL. Move the dereference after the NULL check.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Deferred

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2025-10-20 16:15:38.250000

Last modified

2026-10-19 21:10:00.160000

View original CVE JSON

{
  "id": "CVE-2025-40015",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2025-10-20T16:15:38.250",
  "lastModified": "2026-10-19T21:10:00.160",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: stm32-csi: Fix dereference before NULL check\n\nIn 'stm32_csi_start', 'csidev->s_subdev' is dereferenced directly while\nassigning a value to the 'src_pad'. However the same value is being\nchecked against NULL at a later point of time indicating that there\nare chances that the value can be NULL.\n\nMove the dereference after the NULL check."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmedia: stm32-csi: Corregir desreferencia antes de la comprobación de NULL\n\nEn 'stm32_csi_start', 'csidev->s_subdev' es desreferenciado directamente mientras\nse asigna un valor a 'src_pad'. Sin embargo, el mismo valor se comprueba\ncontra NULL en un momento posterior, lo que indica que existen posibilidades\nde que el valor sea NULL.\n\nMover la desreferencia después de la comprobación de NULL."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/media/platform/st/stm32/stm32-csi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "e7bad98c205d17c745de9d83ebf73e53cbf99d48",
              "lessThan": "1f053d82e59c785b2b939cbed12f13657f84b296",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "e7bad98c205d17c745de9d83ebf73e53cbf99d48",
              "lessThan": "4eeafff163e80d576c5efc1360ae310c0ceedd02",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "e7bad98c205d17c745de9d83ebf73e53cbf99d48",
              "lessThan": "80eaf32672871bd2623ce6ba13ffc1f018756580",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/media/platform/st/stm32/stm32-csi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.15",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.15",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.16.11",
              "lessThanOrEqual": "6.16.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.17.1",
              "lessThanOrEqual": "6.17.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/1f053d82e59c785b2b939cbed12f13657f84b296",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/4eeafff163e80d576c5efc1360ae310c0ceedd02",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/80eaf32672871bd2623ce6ba13ffc1f018756580",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}