{"id":"CVE-2025-37986","title":"usb: typec: class: Invalidate USB device pointers on partner unregistration","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: class: Invalidate USB device pointers on partner unregistration\n\nTo avoid using invalid USB device pointers after a Type-C partner\ndisconnects, this patch c…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < 40966fc9939e85677fdb489dfddfa205baaad03b","Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < 74911338f47c13d1b9470fc50718182bffad42e2","Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < 66e1a887273c6b89f09bc11a40d0a71d5a081a8e","Linux 6.7"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:47:26.458508Z"},"published":"2025-05-20","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:52:10.886Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-37986","references":[{"url":"https://git.kernel.org/stable/c/40966fc9939e85677fdb489dfddfa205baaad03b"},{"url":"https://git.kernel.org/stable/c/74911338f47c13d1b9470fc50718182bffad42e2"},{"url":"https://git.kernel.org/stable/c/66e1a887273c6b89f09bc11a40d0a71d5a081a8e"}],"tags":["cve.org"],"epss":0.00185,"epssPercentile":0.08197,"ingestedAt":"2026-11-05T22:38:31.902Z","slug":"CVE-2025-37986","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: class: Invalidate USB device pointers on partner unregistration\n\nTo avoid using invalid USB device pointers after a Type-C partner\ndisconnects, this patch clears the pointers upon partner unregistration.\nThis ensures a clean state for future connections.\n\n## Affected\n\n- `Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < 40966fc9939e85677fdb489dfddfa205baaad03b`\n- `Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < 74911338f47c13d1b9470fc50718182bffad42e2`\n- `Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < 66e1a887273c6b89f09bc11a40d0a71d5a081a8e`\n- `Linux 6.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}