CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-37881: usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()

The variable d->name, returned by devm_kasprintf(), could be NULL.
A pointer check is added to prevent potential NULL pointer dereference.
This is similar to the fix in commit 3027e7b15b02
("ice: Fix some null pointer dereference issues in ice_ptp.c").

This issue is found by our static analysis tool

Classification

CVE ID: CVE-2025-37881

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 12.64% (scored less or equal to compared to others)

EPSS Date: 2025-06-07 (when was this score calculated)

References

Timeline

2025-05-09 07:40:14 UTC
CVE

usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()