---
id: CVE-2025-37809
title: 'usb: typec: class: Fix NULL pointer access'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  usb: typec: class: Fix NULL pointer access

  Concurrent calls to typec_partner_unlink_device can lead to a NULL pointer
  dereference. This patch adds a mutex to protect U…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 <
    de7c24febd21413ea8f49f61b36338b676c02852
  - >-
    Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 <
    1fdde62411fe65640e69bc55ea027d5b7b2f0093
  - >-
    Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 <
    ec27386de23a511008c53aa2f3434ad180a3ca9a
  - Linux 6.7
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:41:12.666595Z'
published: '2025-05-08'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:41:54.910Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-37809'
references:
  - url: 'https://git.kernel.org/stable/c/de7c24febd21413ea8f49f61b36338b676c02852'
  - url: 'https://git.kernel.org/stable/c/1fdde62411fe65640e69bc55ea027d5b7b2f0093'
  - url: 'https://git.kernel.org/stable/c/ec27386de23a511008c53aa2f3434ad180a3ca9a'
tags:
  - cve.org
epss: 0.00204
epssPercentile: 0.10388
ingestedAt: '2026-11-05T22:38:31.872Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: class: Fix NULL pointer access

Concurrent calls to typec_partner_unlink_device can lead to a NULL pointer
dereference. This patch adds a mutex to protect USB device pointers and
prevent this issue. The same mutex protects both the device pointers and
the partner device registration.

## Affected

- `Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < de7c24febd21413ea8f49f61b36338b676c02852`
- `Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < 1fdde62411fe65640e69bc55ea027d5b7b2f0093`
- `Linux >= 59de2a56d127890cc610f3896d5fc31887c54ac2 < ec27386de23a511008c53aa2f3434ad180a3ca9a`
- `Linux 6.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.