Security Advisory

CVE-2025-38629

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-22 16:00:37
Last updated 2026-05-11 21:31:55
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: scarlett2: Fix missing NULL check scarlett2_input_select_ctl_info() sets up the string arrays allocated via kasprintf(), but it misses NULL checks, which may lead to NULL dereference Oops. Lets add the proper NULL check.