CVE-2025-38368: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-38368 is a vulnerability discovered in the Linux kernel, specifically in the tps6594-pfsm driver component. The vulnerability was identified on July 25, 2025, and involves a potential NULL pointer dereference issue in the tps6594pfsmprobe() function (NVD).

The vulnerability stems from the tps6594pfsmprobe() function where the returned value pfsm->miscdev.name from devmkasprintf() could be NULL. Without proper NULL pointer checking, this could lead to a NULL pointer dereference. This issue was identified through static analysis tools and is similar to a previous fix implemented in commit 3027e7b15b02 for NULL pointer dereference issues in iceptp.c (NVD).

A NULL pointer dereference vulnerability could potentially lead to system crashes or denial of service conditions in affected Linux kernel systems (NVD).

The vulnerability has been resolved by adding a NULL pointer check in the tps6594pfsmprobe() function. The fix has been implemented in various Linux distributions, including Ubuntu and Debian. Debian has marked this as fixed in versions 5.10.223-1 for bullseye, 6.1.137-1 for bookworm, and 6.12.38-1 for trixie/sid (Debian).