CVE-2025-37809

usb: typec: class: Fix NULL pointer access

published May 8, 2025

CVSS
—
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: class: Fix NULL pointer access

Concurrent calls to typec_partner_unlink_device can lead to a NULL pointer

dereference. This patch adds a mutex to protect USB device pointers and

prevent this issue. The same mutex protects both the device pointers and

the partner device registration.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.8th percentile
Published
2025-05-08T06:26Z
EPSS history
Timeline
  • 08 MAY 06:26Z
    usb: typec: class: Fix NULL pointer access
    cvelistv5