CVE-2025-38531

CVE-2025-38531 is a vulnerability in the Linux kernel's st_sensors common driver, affecting the linux_kernel product. It stems from the use of uninitialized device structures within probe functions, leading to a kernel panic if devm_regulator_bulk_get_enable() fails and subsequently calls dev_err_probe(). This vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low attack complexity, requiring low privileges, and resulting in high availability impact (kernel panic). There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. While there's limited community discussion and media coverage, it has been addressed in Ubuntu security updates.