CVE-2025-21918

usb: typec: ucsi: Fix NULL pointer access

Medium · published April 1, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: ucsi: Fix NULL pointer access

Resources should be released only after all threads that utilize them

have been destroyed.

This commit ensures that resources are not released prematurely by waiting

for the associated workqueue to complete before deallocating them.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.8th percentile
Published
2025-04-01T15:40Z
EPSS history
Timeline
  • 01 APR 15:40Z
    usb: typec: ucsi: Fix NULL pointer access
    cvelistv5