CVE-2025-40015

    Dashboard / Vulnerabilities / CVE-2025-40015

    CVE-2025-40015

    Published: 20 Oct 2025Last Modified: 12 Aug 2026

    Summary: media: stm32-csi: Fix dereference before NULL check

    Details: In the Linux kernel, the following vulnerability has been resolved: media: stm32-csi: Fix dereference before NULL check In 'stm32_csi_start', 'csidev->s_subdev' is dereferenced directly while assigning a value to the 'src_pad'. However the same value is being checked against NULL at a later point of time indicating that there are chances that the value can be NULL. Move the dereference after the NULL check.

    References: https://git.kernel.org/stable/c/1f053d82e59c785b2b939cbed12f13657f84b296, https://git.kernel.org/stable/c/4eeafff163e80d576c5efc1360ae310c0ceedd02, https://git.kernel.org/stable/c/80eaf32672871bd2623ce6ba13ffc1f018756580, https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40015.json, https://nvd.nist.gov/vuln/detail/CVE-2025-40015, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- e7bad98c205d17c745de9d83ebf73e53cbf99d48
    Fixed -1f053d82e59c785b2b939cbed12f13657f84b296

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2025-40015 | CVE-DB