Medium 5.5Published Sep 4, 2025

CVE-2025-38693media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar

Updated under an hour ago (Oct 26, 2026, 2:30 PM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar In w7090p_tuner_write_serpar, msg is controlled by user. When msg[0].buf is null and msg[0].len is zero, former checks on msg[0].buf would be passed. If accessing msg[0].buf[2] without sanity check, null pointer deref would happen. We add check on msg[0].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: May 12, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	713d54a8bd812229410a1902cd9b332a2a27af9f builds before 7a41ecfc3415ebe3b4c44f96b3337691dcf431a3; from 713d54a8bd812229410a1902cd9b332a2a27af9f before b3d77a3fc71c084575d3df4ec6544b3fb6ce587d; 713d54a8bd812229410a1902cd9b332a2a27af9f builds before 17b30e5ded062bd74f8ca6f317e1d415a8680665; 713d54a8bd812229410a1902cd9b332a2a27af9f builds before 454a443eaa792c8865c861a282fe6d4f596abc3a; 713d54a8bd812229410a1902cd9b332a2a27af9f builds before 6bbaec6a036940e22318f0454b50b8000845ab59; from 713d54a8bd812229410a1902cd9b332a2a27af9f before f98132a59ccc59a8b97987363bc99c8968934756; from 713d54a8bd812229410a1902cd9b332a2a27af9f before 99690a494d91a0dc86cebd628da4c62c40552bcb; 713d54a8bd812229410a1902cd9b332a2a27af9f builds before 39b06b93f24dff923c4183d564ed28c039150554; and 1 more ranges	CNA record
Siemens SIMATIC CN 4100 siemens:simatic_cn_4100 (from the name)	before V5.0	CISA ADP
linux linux_kernel linux:linux_kernel	from 2.6.39 before 5.4.297; from 5.5 before 5.10.241; from 5.11 before 5.15.190; from 5.16 before 6.1.149; from 6.2 before 6.6.103; from 6.7 before 6.12.43; from 6.13 before 6.15.11; from 6.16 before 6.16.2	NVD
debian debian_linux debian:debian_linux	11.0	NVD

References

References

https://git.kernel.org/stable/c/7a41ecfc3415ebe3b4c44f96b3337691dcf431a3	patch
https://git.kernel.org/stable/c/b3d77a3fc71c084575d3df4ec6544b3fb6ce587d
https://git.kernel.org/stable/c/17b30e5ded062bd74f8ca6f317e1d415a8680665	patch
https://git.kernel.org/stable/c/454a443eaa792c8865c861a282fe6d4f596abc3a	patch
https://git.kernel.org/stable/c/6bbaec6a036940e22318f0454b50b8000845ab59	patch
https://git.kernel.org/stable/c/f98132a59ccc59a8b97987363bc99c8968934756	patch
https://git.kernel.org/stable/c/99690a494d91a0dc86cebd628da4c62c40552bcb	patch
https://git.kernel.org/stable/c/39b06b93f24dff923c4183d564ed28c039150554	patch
https://git.kernel.org/stable/c/ed0234c8458b3149f15e496b48a1c9874dd24a1b	patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html	third-party-advisory
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.