CVE-2025-37809

MEDIUM

5.5

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Fix NULL pointer access Concurrent calls to typec_partner_unlink_device can lead to a NULL pointer dereference. This patch adds a mutex to protect USB device pointers and prevent this issue. The same mutex protects both the device pointers and the partner device registration.

Details CVE

Score CVSS v3.15.5

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie5/8/2025

Derniere modification11/12/2025

Sourcenvd

Observations honeypot0

Produits affectes

linux:linux_kernel

Faiblesses (CWE)

CWE-476

References

https://git.kernel.org/stable/c/1fdde62411fe65640e69bc55ea027d5b7b2f0093(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/de7c24febd21413ea8f49f61b36338b676c02852(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/ec27386de23a511008c53aa2f3434ad180a3ca9a(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.