Dashboard / CVE-2025-38629

CVE-2025-38629

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-08-22 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: scarlett2: Fix missing NULL check scarlett2_input_select_ctl_info() sets up the string arrays allocated via kasprintf(), but it misses NULL checks, which may lead to NULL dereference Oops. Let's add the proper NULL check.

Weakness Classification (1)

Affected Software (5)

VendorProductVersion
Linux Linux 8eba063b5b2b498ddd01ea6f29fc9b12368c3d53 < d558db85920b124bac36f8a7ddc5de0aa7491bdd
Linux Linux 8eba063b5b2b498ddd01ea6f29fc9b12368c3d53 < 2c735fcaee81ad8056960659dc9dc460891e76b0
Linux Linux 8eba063b5b2b498ddd01ea6f29fc9b12368c3d53 < df485a4b2b3ee5b35c80f990beb554e38a8a5fb1
Linux Linux 6.13
linux linux_kernel 6.13 – 6.15.10

References & Advisories (3)

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.18%
Raw Score 0.001750
Percentile 7.1%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00175
2026-11-13
0.00175
2026-11-12
0.00175
2026-11-10
0.00165
2026-11-09
0.00165
2026-11-08
0.00165
2026-11-07
0.00165
2026-11-06
0.00165
2026-11-05
0.00165

Intelligence Sources

mitre ref →
nvd ref →

External Links