CVE-2025-40015
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: media: stm32-csi: Fix dereference before NULL check In 'stm32_csi_start', 'csidev->s_subdev' is dereferenced directly while assigning a value to the 'src_pad'. However the same value is being checked against NULL at a later point of time indicating that there are chances that the value can be NULL. Move the dereference after the NULL check.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedOct 20, 2025
First seenOct 20, 2025
How to fix
Update
- Linux Linux1f053d82e59c785b2b939cbed12f13657f84b296, 4eeafff163e80d576c5efc1360ae310c0ceedd02, 80eaf32672871bd2623ce6ba13ffc1f018756580 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | e7bad98c205d17c745de9d83ebf73e53cbf99d48 ≤ v < 1f053d82e59c785b2b939cbed12f13657f84b296, e7bad98c205d17c745de9d83ebf73e53cbf99d48 ≤ v < 4eeafff163e80d576c5efc1360ae310c0ceedd02, e7bad98c205d17c745de9d83ebf73e53cbf99d48 ≤ v < 80eaf32672871bd2623ce6ba13ffc1f018756580, 6.15 | 1f053d82e59c785b2b939cbed12f13657f84b296, 4eeafff163e80d576c5efc1360ae310c0ceedd02, 80eaf32672871bd2623ce6ba13ffc1f018756580 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.