CVE-2025-37986

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Invalidate USB device pointers on partner unregistration To avoid using invalid USB device pointers after a Type-C partner disconnects, this patch clears the pointers upon partner unregistration. This ensures a clean state for future connections.

Reserved 2025-04-16 | Published 2025-05-20 | Updated 2025-05-26 | Assigner Linux

Product status

Default status
unaffected

59de2a56d127890cc610f3896d5fc31887c54ac2 before 40966fc9939e85677fdb489dfddfa205baaad03b
affected

59de2a56d127890cc610f3896d5fc31887c54ac2 before 74911338f47c13d1b9470fc50718182bffad42e2
affected

59de2a56d127890cc610f3896d5fc31887c54ac2 before 66e1a887273c6b89f09bc11a40d0a71d5a081a8e
affected

Default status
affected

6.7
affected

Any version before 6.7
unaffected

6.12.26
unaffected

6.14.5
unaffected

6.15
unaffected

References

git.kernel.org/...c/40966fc9939e85677fdb489dfddfa205baaad03b

git.kernel.org/...c/74911338f47c13d1b9470fc50718182bffad42e2

git.kernel.org/...c/66e1a887273c6b89f09bc11a40d0a71d5a081a8e

cve.org (CVE-2025-37986)

nvd.nist.gov (CVE-2025-37986)

Download JSON