UnratedFix available
serial: Fix potential null-ptr-deref in mlb_usio_probe()
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlb_usio_probe() devm_ioremap() can return NULL on error. Currently, mlb_usio_probe() does not check for this case, which could result in a NULL pointer dereference. Add NULL check after devm_ioremap() to prevent this issue.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.239, 5.15.186, 5.4.295, 6.1.142, 6.12.34, 6.15.3, 6.6.94
- CVEs
- CVE-2025-38135
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 7 Nov 2026, 04:43 UTC · Revision 1
Source evidence
serial: Fix potential null-ptr-deref in mlb_usio_probe()
core-osv · Original sourcePublished 3 Jul 2025, 08:35 UTC
In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlb_usio_probe() devm_ioremap() can return NULL on error. Currently, mlb_usio_probe() does not check for this case, which could result in a NULL pointer dereference. Add NULL check after devm_ioremap() to prevent this issue.
osv:CVE-2025-38135
Kernel
Fixed versions: 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.94, 6.12.34, 6.15.3
Complete source record
{
"id": "d9a24fa8642bce454b16cc7bd023d0e76e4ea6f2b04c4a9ebbb0a4105a3cecdd",
"url": "https://osv.dev/vulnerability/CVE-2025-38135",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "serial: Fix potential null-ptr-deref in mlb_usio_probe()",
"summary": "In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlb_usio_probe() devm_ioremap() can return NULL on error. Currently, mlb_usio_probe() does not check for this case, which could result in a NULL pointer dereference. Add NULL check after devm_ioremap() to prevent this issue.",
"evidence": "osv:CVE-2025-38135",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.295",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.239",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.186",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.142",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.94",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.34",
"evidence": "/affected/1/ranges"
},
{
"value": "6.15.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2025-38135",
"aliases": [
"CVE-2025-38135"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "ba44dc04300441b47618f9933bf36e75a280e5fe"
},
{
"fixed": "a05ebe384c7ca75476453f3070c67d9cf1d1a89f"
},
{
"fixed": "81159a6b064142b993f2f39828b77e199c77872a"
},
{
"fixed": "19fd9f5a69363d33079097d866eb6082d61bf31d"
},
{
"fixed": "548b0e81b9a0902a8bc8259430ed965663baadfc"
},
{
"fixed": "a6c7c365734cd0fa1c5aa225a6294fdf80cad2ea"
},
{
"fixed": "c23d87b43f7dba5eb12820f6cf21a1cd4f63eb3d"
},
{
"fixed": "e1b144aebe6fb898d96ced8c990d7aa38fda4a7a"
},
{
"fixed": "86bcae88c9209e334b2f8c252f4cc66beb261886"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38135.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.2.0"
},
{
"fixed": "5.4.295"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.239"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.186"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.142"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.94"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.34"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.15.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38135.json"
}
}
],
"modified": "2026-10-28T02:30:49.993889576Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/19fd9f5a69363d33079097d866eb6082d61bf31d",
"https://git.kernel.org/stable/c/548b0e81b9a0902a8bc8259430ed965663baadfc",
"https://git.kernel.org/stable/c/81159a6b064142b993f2f39828b77e199c77872a",
"https://git.kernel.org/stable/c/86bcae88c9209e334b2f8c252f4cc66beb261886",
"https://git.kernel.org/stable/c/a05ebe384c7ca75476453f3070c67d9cf1d1a89f",
"https://git.kernel.org/stable/c/a6c7c365734cd0fa1c5aa225a6294fdf80cad2ea",
"https://git.kernel.org/stable/c/c23d87b43f7dba5eb12820f6cf21a1cd4f63eb3d",
"https://git.kernel.org/stable/c/e1b144aebe6fb898d96ced8c990d7aa38fda4a7a",
"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html",
"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38135.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38135",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38135.json"
}
},
"related_cves": [
{
"value": "CVE-2025-38135",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 518226,
"published_at": "2025-07-03T08:35:38.295+00:00"
}