Back to CVE records
Not yet scoredPublished Nov 12, 2025

CVE-2025-40156PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() The drv->sram_reg pointer could be set to ERR_PTR(-EPROBE_DEFER) which would lead to a error pointer dereference. Use IS_ERR_OR_NULL() to check that the pointer is valid.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from e09bd5757b5227d6804b30c58d4587f7f87d1afa before 9cc23e221f392304b7b8aad213812564ddf6517e; from e09bd5757b5227d6804b30c58d4587f7f87d1afa before 80eab6a9df7e1107dc334434dbacd05297703377; from e09bd5757b5227d6804b30c58d4587f7f87d1afa before 44e32104cf7e670e3d683c97b52350d8fac23322; from e09bd5757b5227d6804b30c58d4587f7f87d1afa before 24d61b6e23d2c7291c528dd43a0bf76b5c05c8f0; from e09bd5757b5227d6804b30c58d4587f7f87d1afa before fc33bf0e097c6834646b98a7b3da0ae5b617f0f9
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.