CVE-2025-37881

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() The variable d->name, returned by devm_kasprintf(), could be NULL. A pointer check is added to prevent potential NULL pointer dereference. This is similar to the fix in commit 3027e7b15b02 ("ice: Fix some null pointer dereference issues in ice_ptp.c"). This issue is found by our static analysis tool

Reserved 2025-04-16 | Published 2025-05-09 | Updated 2025-05-09 | Assigner Linux

Product status

Default status
unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a777ccfb9ba8d43f745e41b69ba39d4a506a081e
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c8d4faf452a627f9b09c3a5c366133a19e5b7a28
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d26a6093d52904cacdbb75424c323c19b443a890
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 36d68151712e525450f0fbb3045e7110f0d9b610
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cfa7984f69359761b07a7831c1258c0fde1e0389
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 052fb65335befeae8500e88d69ea022266baaf6d
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 61006ca381b4d65d2b8ca695ea8da1ce18d6dee3
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 8c75f3e6a433d92084ad4e78b029ae680865420f
affected

Default status
affected

5.4.293
unaffected

5.10.237
unaffected

5.15.181
unaffected

6.1.136
unaffected

6.6.89
unaffected

6.12.26
unaffected

6.14.5
unaffected

6.15-rc1
unaffected

References

git.kernel.org/...c/a777ccfb9ba8d43f745e41b69ba39d4a506a081e

git.kernel.org/...c/c8d4faf452a627f9b09c3a5c366133a19e5b7a28

git.kernel.org/...c/d26a6093d52904cacdbb75424c323c19b443a890

git.kernel.org/...c/36d68151712e525450f0fbb3045e7110f0d9b610

git.kernel.org/...c/cfa7984f69359761b07a7831c1258c0fde1e0389

git.kernel.org/...c/052fb65335befeae8500e88d69ea022266baaf6d

git.kernel.org/...c/61006ca381b4d65d2b8ca695ea8da1ce18d6dee3

git.kernel.org/...c/8c75f3e6a433d92084ad4e78b029ae680865420f

cve.org (CVE-2025-37881)

nvd.nist.gov (CVE-2025-37881)

Download JSON