Bug 2388947 (CVE-2025-38536) - CVE-2025-38536 kernel: net: airoha: fix potential use-after-free in airoha_npu_get()
Summary: CVE-2025-38536 kernel: net: airoha: fix potential use-after-free in airoha_np...
Keywords:
Status: NEW
Alias: CVE-2025-38536
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-08-16 12:03 UTC by OSIDB Bzimport
Modified: 2025-08-18 05:22 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-08-16 12:03:09 UTC
In the Linux kernel, the following vulnerability has been resolved:

net: airoha: fix potential use-after-free in airoha_npu_get()

np->name was being used after calling of_node_put(np), which
releases the node and can lead to a use-after-free bug.
Previously, of_node_put(np) was called unconditionally after
of_find_device_by_node(np), which could result in a use-after-free if
pdev is NULL.

This patch moves of_node_put(np) after the error check to ensure
the node is only released after both the error and success cases
are handled appropriately, preventing potential resource issues.


Note You need to log in before you can comment on or make changes to this bug.