Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-37809

usb: typec: class: Fix NULL pointer access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Fix NULL pointer access Concurrent calls to typec_partner_unlink_device can lead to a NULL pointer dereference. This patch adds a mutex to protect USB device pointers and prevent this issue. The same mutex protects both the device pointers and the partner device registration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 59de2a56d127890cc610f3896d5fc31887c54ac2 to < de7c24febd21413ea8f49f61b36338b676c02852affected
  • 59de2a56d127890cc610f3896d5fc31887c54ac2 to < 1fdde62411fe65640e69bc55ea027d5b7b2f0093affected
  • 59de2a56d127890cc610f3896d5fc31887c54ac2 to < ec27386de23a511008c53aa2f3434ad180a3ca9aaffected

Linux Linux

Default version status: affected

  • 6.7affected
  • 0 to < 6.7unaffected
  • 6.12.26 to ≤ 6.12.*unaffected
  • 6.14.5 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References