NetSight
IP …
medium5.5

CVE-2025-37881

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() The variable d->name, re…

Impact

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() The variable d->name, returned by devm_kasprintf(), could be NULL. A pointer check is added to prevent potential NULL pointer dereference. This is similar to the fix in commit 3027e7b15b02 ("ice: Fix some null pointer dereference issues in ice_ptp.c"). This issue is found by our static analysis tool

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.18 before 5.4.293
from 5.5 before 5.10.237
from 5.11 before 5.15.181
from 5.16 before 6.1.136
from 6.2 before 6.6.89
from 6.7 before 6.12.26
DebianDebian Linux
Version 11.0

Weakness classification

CWE-476

References