Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Fix NULL pointer access Concurrent calls to typec_partner_unlink_device can lead to a NULL pointer dereference. This patch adds a mutex to protect USB device pointers and prevent this issue. The same mutex protects both the device pointers and the partner device registration.

INFO

Published Date :

2025-05-08T06:26:07.510Z

Last Modified :

2025-05-26T05:21:19.579Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-37809 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-37809.

URL Resource
https://git.kernel.org/stable/c/1fdde62411fe65640e69bc55ea027d5b7b2f0093 cve-icon cve-icon
https://git.kernel.org/stable/c/de7c24febd21413ea8f49f61b36338b676c02852 cve-icon cve-icon
https://git.kernel.org/stable/c/ec27386de23a511008c53aa2f3434ad180a3ca9a cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025050816-CVE-2025-37809-7d55@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-37809 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-37809 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact