01 Record

CVE-2025-38694

media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 6.8% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-04 15:32Z1 YR AGO

Last updated

2026-05-12 12:05Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

a36b04a05f39f8a4c56ff00fc300e772e8bbf155f769a3a6c71f8d7dd2852635

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux713d54a8bd812229410a1902cd9b332a2a27af9f to < bc07cae4f36bb18d5b6a9ed835c1278ca44ec82e, 713d54a8bd812229410a1902cd9b332a2a27af9f to < ce8b7c711b9c4f040b5419729d0972db8e374324, 713d54a8bd812229410a1902cd9b332a2a27af9f to < 529fd5593b721e6f4370c591f5086649ed149ff6, 713d54a8bd812229410a1902cd9b332a2a27af9f to < c33280d6bd668dbdc5a5f07887cc63a52ab4789c, 713d54a8bd812229410a1902cd9b332a2a27af9f to < 09906650484a09b3a4d4b3d3065395856810becd, 713d54a8bd812229410a1902cd9b332a2a27af9f to < 0bb32863426afe0badac25c28d59021f211d0f48, 713d54a8bd812229410a1902cd9b332a2a27af9f to < a0f744d6cdde81d7382e183f77a4080a39b206cd, 713d54a8bd812229410a1902cd9b332a2a27af9f to < 19eb5d8e6aa1169d368a4d69aae5572950deb89d, 713d54a8bd812229410a1902cd9b332a2a27af9f to < ce5cac69b2edac3e3246fee03e8f4c2a1075238b, 2.6.39—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/bc07cae4f36bb18d5b6a9ed835c1278ca44ec82e
git.kernel.orghttps://git.kernel.org/stable/c/ce8b7c711b9c4f040b5419729d0972db8e374324
git.kernel.orghttps://git.kernel.org/stable/c/529fd5593b721e6f4370c591f5086649ed149ff6
git.kernel.orghttps://git.kernel.org/stable/c/c33280d6bd668dbdc5a5f07887cc63a52ab4789c
git.kernel.orghttps://git.kernel.org/stable/c/09906650484a09b3a4d4b3d3065395856810becd
git.kernel.orghttps://git.kernel.org/stable/c/0bb32863426afe0badac25c28d59021f211d0f48
git.kernel.orghttps://git.kernel.org/stable/c/a0f744d6cdde81d7382e183f77a4080a39b206cd
git.kernel.orghttps://git.kernel.org/stable/c/19eb5d8e6aa1169d368a4d69aae5572950deb89d
git.kernel.orghttps://git.kernel.org/stable/c/ce5cac69b2edac3e3246fee03e8f4c2a1075238b
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html

01 Record index

CVE-2025-38694

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38694

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References