CVE-2025-22051: staging: gpib: Fix Oops after disconnect in agilent usb
In the Linux kernel, the following vulnerability has been resolved:
staging: gpib: Fix Oops after disconnect in agilent usb
If the agilent usb dongle is disconnected subsequent calls to the driver cause a NULL dereference Oops as the businterface is set to NULL on disconnect.
This problem was introduced by setting usbdev from the businterface for devxxx messages.
Previously businterface was checked for NULL only in the functions directly calling usbfillbulkurb or usbcontrolmsg.
Check for valid businterface on all interface entry points and return -ENODEV if it is NULL.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22051?
CVE-2025-22051 is classified as a medium severity vulnerability in the Linux kernel.
What impact does CVE-2025-22051 have?
The impact of CVE-2025-22051 is a potential system crash due to a NULL dereference Oops when the Agilent USB dongle is disconnected.
How do I fix CVE-2025-22051?
To fix CVE-2025-22051, users should update their Linux kernel to a version that addresses this vulnerability, specifically beyond the mentioned affected versions.
Which versions of the Linux kernel are affected by CVE-2025-22051?
CVE-2025-22051 affects Linux kernel versions from 6.13 to 6.14.2.
Is there a workaround for CVE-2025-22051?
There are no specific workarounds for CVE-2025-22051 aside from applying the appropriate security updates to the Linux kernel.