[SRU][P][PATCH 1/1] wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init()
alice.munduruca at canonical.com
alice.munduruca at canonical.com
Fri Aug 22 02:37:46 UTC 2025
From: Henry Martin <bsdhenrymartin at gmail.com>
devm_kasprintf() returns NULL on error. Currently, mt7925_thermal_init()
does not check for this case, which results in a NULL pointer
dereference.
Add NULL check after devm_kasprintf() to prevent this issue.
Fixes: 396e41a74a88 ("wifi: mt76: mt7925: support temperature sensor")
Signed-off-by: Henry Martin <bsdhenryma at tencent.com>
Reviewed-by: AngeloGioacchino Del Regno <angelogioacchino.delregno at collabora.com>
Link: https://patch.msgid.link/20250625124901.1839832-1-bsdhenryma@tencent.com
Signed-off-by: Felix Fietkau <nbd at nbd.name>
(cherry picked from commit 03ee8f73801a8f46d83dfc2bf73fb9ffa5a21602)
CVE-2025-38541
Signed-off-by: Alice C. Munduruca <alice.munduruca at canonical.com>
---
drivers/net/wireless/mediatek/mt76/mt7925/init.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/drivers/net/wireless/mediatek/mt76/mt7925/init.c b/drivers/net/wireless/mediatek/mt76/mt7925/init.c
index a2bb36dab231..8562d12e1ae8 100644
--- a/drivers/net/wireless/mediatek/mt76/mt7925/init.c
+++ b/drivers/net/wireless/mediatek/mt76/mt7925/init.c
@@ -52,6 +52,8 @@ static int mt7925_thermal_init(struct mt792x_phy *phy)
name = devm_kasprintf(&wiphy->dev, GFP_KERNEL, "mt7925_%s",
wiphy_name(wiphy));
+ if (!name)
+ return -ENOMEM;
hwmon = devm_hwmon_device_register_with_groups(&wiphy->dev, name, phy,
mt7925_hwmon_groups);
--
2.48.1
More information about the kernel-team
mailing list