CVE-2025-37881

{"id": "CVE-2025-37881", "cveTags": [], "metrics": {}, "published": "2025-05-09T07:16:09.367", "references": [{"url": "https://git.kernel.org/stable/c/052fb65335befeae8500e88d69ea022266baaf6d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/36d68151712e525450f0fbb3045e7110f0d9b610", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/61006ca381b4d65d2b8ca695ea8da1ce18d6dee3", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8c75f3e6a433d92084ad4e78b029ae680865420f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a777ccfb9ba8d43f745e41b69ba39d4a506a081e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c8d4faf452a627f9b09c3a5c366133a19e5b7a28", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/cfa7984f69359761b07a7831c1258c0fde1e0389", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d26a6093d52904cacdbb75424c323c19b443a890", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()\n\nThe variable d->name, returned by devm_kasprintf(), could be NULL.\nA pointer check is added to prevent potential NULL pointer dereference.\nThis is similar to the fix in commit 3027e7b15b02\n(\"ice: Fix some null pointer dereference issues in ice_ptp.c\").\n\nThis issue is found by our static analysis tool"}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: gadget: aspeed: Se ha a\u00f1adido una comprobaci\u00f3n de puntero nulo en ast_vhub_init_dev(). La variable d->name, devuelta por devm_kasprintf(), podr\u00eda ser nula. Se ha a\u00f1adido una comprobaci\u00f3n de puntero para evitar posibles desreferencias de punteros nulos. Esto es similar a la correcci\u00f3n en la confirmaci\u00f3n 3027e7b15b02 (\"ice: Se corrigen algunos problemas de desreferencia de puntero nulo en ice_ptp.c\"). Nuestra herramienta de an\u00e1lisis est\u00e1tico ha detectado este problema."}], "lastModified": "2025-11-03T20:18:39.763", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}