CVE-2025-37784

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-37784

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: net: ti: icss-iep: Fix possible NULL pointer dereference for perout request The ICSS IEP driver tracks perout and pps enable state with flags. Currently when disabling pps and perout signals during icss_iep_exit(), results in NULL pointer dereference for perout. To fix the null pointer dereference issue, the icss_iep_perout_enable_hw function can be modified to directly clear the IEP CMP registers when disabling PPS or PEROUT, without referencing the ptp_perout_request structure, as its contents are irrelevant in this case.

References
Link Resource
https://git.kernel.org/stable/c/7349c9e9979333abfce42da5f9025598083b59c9 Patch
https://git.kernel.org/stable/c/7891619d21f07a88e0275d6d43db74035aa74f69 Patch
https://git.kernel.org/stable/c/da5035d7aeadcfa44096dd34689bfed6c657f559 Patch
https://git.kernel.org/stable/c/eeec66327001421531b3fb1a2ac32efc8a2493b0 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
History

04 Nov 2025, 19:13

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CWE CWE-476
References () https://git.kernel.org/stable/c/7349c9e9979333abfce42da5f9025598083b59c9 - () https://git.kernel.org/stable/c/7349c9e9979333abfce42da5f9025598083b59c9 - Patch
References () https://git.kernel.org/stable/c/7891619d21f07a88e0275d6d43db74035aa74f69 - () https://git.kernel.org/stable/c/7891619d21f07a88e0275d6d43db74035aa74f69 - Patch
References () https://git.kernel.org/stable/c/da5035d7aeadcfa44096dd34689bfed6c657f559 - () https://git.kernel.org/stable/c/da5035d7aeadcfa44096dd34689bfed6c657f559 - Patch
References () https://git.kernel.org/stable/c/eeec66327001421531b3fb1a2ac32efc8a2493b0 - () https://git.kernel.org/stable/c/eeec66327001421531b3fb1a2ac32efc8a2493b0 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: ti: icss-iep: Se corrige una posible desreferencia de puntero nulo para la solicitud perout. El controlador IEP de ICSS rastrea el estado de habilitación de perout y pps mediante indicadores. Actualmente, al deshabilitar las señales pps y perout durante icss_iep_exit(), se produce una desreferencia de puntero nulo para perout. Para solucionar el problema de desreferencia de puntero nulo, se puede modificar la función icss_iep_perout_enable_hw para borrar directamente los registros CMP de IEP al deshabilitar PPS o PEROUT, sin referenciar la estructura ptp_perout_request, ya que su contenido es irrelevante en este caso.
CPE cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*

01 May 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-01 14:15

Updated : 2025-11-04 19:13

NVD link : CVE-2025-37784

Mitre link : CVE-2025-37784

CVE.ORG link : CVE-2025-37784

JSON object : View

Products Affected

linux

CWE
CWE-476

NULL Pointer Dereference