CVE-2025-37881

usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()

published May 9, 2025

CVSS
—
EPSS
0%
Percentile
23.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()

The variable d->name, returned by devm_kasprintf(), could be NULL.

A pointer check is added to prevent potential NULL pointer dereference.

This is similar to the fix in commit 3027e7b15b02

("ice: Fix some null pointer dereference issues in ice_ptp.c").

This issue is found by our static analysis tool

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00314 · 23.1th percentile
Published
2025-05-09T06:45Z
EPSS history
Timeline
  • 09 MAY 06:45Z
    usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
    cvelistv5