Listen to this Post
How the CVE Works
This vulnerability exists within the TPS6594 Power-FSM (PFSM) driver in the Linux kernel (tps6594-pfsm). During the device probe function tps6594_pfsm_probe(), the code uses `devm_kasprintf()` to allocate and format a name for the miscellaneous device. The `devm_kasprintf()` function can fail, returning a NULL pointer. The original code did not check for this failure before proceeding to use the pointer. If this memory allocation fails, a subsequent operation that dereferences this NULL pointer would cause a kernel oops, leading to a system crash or unpredictable behavior. This is a classic NULL pointer dereference flaw originating from improper error handling.
DailyCVE Form
Platform: Linux Kernel
Version: (Pre-patch versions)
Vulnerability: NULL Dereference
Severity: Low
Date: 07/25/2025
Prediction: Patch expected by 08/08/2025
What Undercode Say:
Analytics
git log --oneline --grep="tps6594-pfsm" cat drivers/misc/tps6594-pfsm.c | grep -A 10 -B 5 "pfsm->miscdev.name" checkpatch.pl --file drivers/misc/tps6594-pfsm.c
pfsm->miscdev.name = devm_kasprintf(dev, GFP_KERNEL, "pfsm-%s", dev_name(dev)); if (!pfsm->miscdev.name) // <- Missing check return -ENOMEM;
How Exploit:
Kernel Crash
Protection from this CVE
Apply kernel patch.
Impact:
Denial-of-Service
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
