NetSight
IP …
medium5.5

CVE-2025-37748

In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group Currently, mtk_iommu c…

Impact

In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group Currently, mtk_iommu calls during probe iommu_device_register before the hw_list from driver data is initialized. Since iommu probing issue fix, it leads to NULL pointer dereference in mtk_iommu_device_group when hw_list is accessed with list_first_entry (not null safe). So, change the call order to ensure iommu_device_register is called after the driver data are initialized.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.19 before 6.1.135
from 6.2 before 6.6.88
from 6.7 before 6.12.24
from 6.13 before 6.13.12
from 6.14 before 6.14.3
Version 6.15
DebianDebian Linux
Version 11.0

Weakness classification

CWE-476

References