CVE-2025-22052

Description

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix Oops after disconnect in ni_usb If the usb dongle is disconnected subsequent calls to the driver cause a NULL dereference Oops as the bus_interface is set to NULL on disconnect. This problem was introduced by setting usb_dev from the bus_interface for dev_xxx messages. Previously bus_interface was checked for NULL only in the the functions directly calling usb_fill_bulk_urb or usb_control_msg. Check for valid bus_interface on all interface entry points and return -ENODEV if it is NULL.

Reserved 2024-12-29 | Published 2025-04-16 | Updated 2025-05-26 | Assigner Linux

Product status

Default status
unaffected

4934b98bb24327c32ed55c96012f019932383da5 before b2d8d7959077c5d4b11d0dc6bd2167791fd1c72e
affected

4934b98bb24327c32ed55c96012f019932383da5 before 5dc98ba6f7304c188b267ef481281849638447bf
affected

4934b98bb24327c32ed55c96012f019932383da5 before a239c6e91b665f1837cf57b97fe638ef1baf2e78
affected

Default status
affected

6.13
affected

Any version before 6.13
unaffected

6.13.11
unaffected

6.14.2
unaffected

6.15
unaffected

References

git.kernel.org/...c/b2d8d7959077c5d4b11d0dc6bd2167791fd1c72e

git.kernel.org/...c/5dc98ba6f7304c188b267ef481281849638447bf

git.kernel.org/...c/a239c6e91b665f1837cf57b97fe638ef1baf2e78

cve.org (CVE-2025-22052)

nvd.nist.gov (CVE-2025-22052)

Download JSON