First published: Wed Apr 16 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix Oops after disconnect in agilent usb If the agilent usb dongle is disconnected subsequent calls to the driver cause a NULL dereference Oops as the bus_interface is set to NULL on disconnect. This problem was introduced by setting usb_dev from the bus_interface for dev_xxx messages. Previously bus_interface was checked for NULL only in the functions directly calling usb_fill_bulk_urb or usb_control_msg. Check for valid bus_interface on all interface entry points and return -ENODEV if it is NULL.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | ||
Linux Kernel | >=6.13<6.13.11 | |
Linux Kernel | >=6.14<6.14.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-22051 is classified as a medium severity vulnerability in the Linux kernel.
The impact of CVE-2025-22051 is a potential system crash due to a NULL dereference Oops when the Agilent USB dongle is disconnected.
To fix CVE-2025-22051, users should update their Linux kernel to a version that addresses this vulnerability, specifically beyond the mentioned affected versions.
CVE-2025-22051 affects Linux kernel versions from 6.13 to 6.14.2.
There are no specific workarounds for CVE-2025-22051 aside from applying the appropriate security updates to the Linux kernel.