CVE-2025-21982
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 1, 2025
Updated: Apr 10, 2025
CWE ID 476
Summary
CVE-2025-21982 is a kernel vulnerability affecting Linux systems with the nuvoton npcm8xx driver. The issue lies in the function npcm8xx_gpio_fw, where devm_kasprintf() calls can return null pointers on failure. However, these return values were not checked in npcm8xx_gpio_fw(), leading to potential kernel null pointer dereferences. The vulnerability has been resolved by adding a NULL check in the function to handle such errors.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX