CVE-2025-22052: staging: gpib: Fix Oops after disconnect in ni_usb
In the Linux kernel, the following vulnerability has been resolved:
staging: gpib: Fix Oops after disconnect in niusb
If the usb dongle is disconnected subsequent calls to the driver cause a NULL dereference Oops as the businterface is set to NULL on disconnect.
This problem was introduced by setting usbdev from the businterface for devxxx messages.
Previously businterface was checked for NULL only in the the functions directly calling usbfillbulkurb or usbcontrolmsg.
Check for valid businterface on all interface entry points and return -ENODEV if it is NULL.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22052?
CVE-2025-22052 has been classified as a moderate severity vulnerability due to the potential for system crashes caused by NULL dereferences.
How do I fix CVE-2025-22052?
To fix CVE-2025-22052, update the Linux kernel to a version above 6.14.2 or apply the patches provided in the kernel's stable repository.
What systems are affected by CVE-2025-22052?
CVE-2025-22052 affects certain versions of the Linux kernel, specifically versions between 6.13 and 6.14.2.
What type of vulnerability is CVE-2025-22052?
CVE-2025-22052 is a NULL pointer dereference vulnerability that can lead to system instability when interacting with specific USB dongles.
Is CVE-2025-22052 remotely exploitable?
CVE-2025-22052 is not remotely exploitable, as it requires the physical disconnection of a USB device to trigger the vulnerability.