CVE-2025-37809: usb: typec: class: Fix NULL pointer access
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: class: Fix NULL pointer access
Concurrent calls to typecpartnerunlinkdevice can lead to a NULL pointer dereference. This patch adds a mutex to protect USB device pointers and prevent this issue. The same mutex protects both the device pointers and the partner device registration.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37809?
CVE-2025-37809 has a medium severity level due to the potential for a NULL pointer dereference in the Linux kernel.
How do I fix CVE-2025-37809?
To fix CVE-2025-37809, ensure that you are running the latest version of the Linux kernel where the vulnerability has been patched.
Which versions of the Linux kernel are affected by CVE-2025-37809?
CVE-2025-37809 affects various versions of the Linux kernel, primarily those prior to the patch being applied.
What are the potential consequences of CVE-2025-37809?
Exploitation of CVE-2025-37809 could lead to system crashes or instability due to the NULL pointer dereference.
Is CVE-2025-37809 being actively exploited in the wild?
As of now, there is no public evidence indicating that CVE-2025-37809 is being actively exploited in the wild.