{"id":"CVE-2025-37809","title":"usb: typec: class: Fix NULL pointer access","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: class: Fix NULL pointer access\n\nConcurrent calls to typec_partner_unlink_device can lead to a NULL pointer\ndereference. This patch adds a mutex to protect U…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < de7c24febd21413ea8f49f61b36338b676c02852","Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < 1fdde62411fe65640e69bc55ea027d5b7b2f0093","Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < ec27386de23a511008c53aa2f3434ad180a3ca9a","Linux 6.7"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:41:12.666595Z"},"published":"2025-05-08","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:41:54.910Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-37809","references":[{"url":"https://git.kernel.org/stable/c/de7c24febd21413ea8f49f61b36338b676c02852"},{"url":"https://git.kernel.org/stable/c/1fdde62411fe65640e69bc55ea027d5b7b2f0093"},{"url":"https://git.kernel.org/stable/c/ec27386de23a511008c53aa2f3434ad180a3ca9a"}],"tags":["cve.org"],"epss":0.00204,"epssPercentile":0.10388,"ingestedAt":"2026-11-05T22:38:31.872Z","slug":"CVE-2025-37809","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: class: Fix NULL pointer access\n\nConcurrent calls to typec_partner_unlink_device can lead to a NULL pointer\ndereference. This patch adds a mutex to protect USB device pointers and\nprevent this issue. The same mutex protects both the device pointers and\nthe partner device registration.\n\n## Affected\n\n- `Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < de7c24febd21413ea8f49f61b36338b676c02852`\n- `Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < 1fdde62411fe65640e69bc55ea027d5b7b2f0093`\n- `Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < ec27386de23a511008c53aa2f3434ad180a3ca9a`\n- `Linux 6.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}