CVE-2025-38265 is a vulnerability in the Linux kernel's jsm serial driver where a null pointer dereference occurs during the initialization of the UART port. This leads to a kernel crash (NULL pointer dereference) when no device is set, causing a denial of service. The issue has been identified and fixed in kernel version 6.12.25-amd64 as tested with Digi Neo PCIe 8 port card.