---
id: CVE-2025-37811
title: 'usb: chipidea: ci_hdrc_imx: fix usbmisc handling'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  usb: chipidea: ci_hdrc_imx: fix usbmisc handling

  usbmisc is an optional device property so it is totally valid for the
  corresponding data->usbmisc_data to have a NULL …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 3f46fefab962fc5dcfe4d53a7c2cdccd51ebdc6d <
    8060b719676e8c0e5a2222c2977ba0458d9d9535
  - >-
    Linux >= 7ae96eba35036bdd47ecd956e882ff057a550405 <
    0ee460498ced49196149197c9f6d29a10e5e0798
  - >-
    Linux >= dcd4de31bd01a7189c24e3cafe40649c9c42b9af <
    121e9f80ea5478bca3a8f3f26593fd66f87da649
  - >-
    Linux >= 57797497a696cffaea421fc4e5a3ea2a8536b1a2 <
    887902ca73490f38c69fd6149ef361a041cf912f
  - >-
    Linux >= 74adad500346fb07d69af2c79acbff4adb061134 <
    2aa87bd825377f5073b76701780a902cd0fc725a
  - >-
    Linux >= 74adad500346fb07d69af2c79acbff4adb061134 <
    4e28f79e3dffa52d327b46d1a78dac16efb5810b
  - Linux >= 5.15.179 < 5.15.181
  - Linux >= 6.1.129 < 6.1.136
  - Linux >= 6.6.72 < 6.6.89
  - Linux >= 6.12.10 < 6.12.26
  - Linux 6.13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:41:18.206465Z'
published: '2025-05-08'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:41:55.080Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-37811'
references:
  - url: 'https://git.kernel.org/stable/c/8060b719676e8c0e5a2222c2977ba0458d9d9535'
  - url: 'https://git.kernel.org/stable/c/0ee460498ced49196149197c9f6d29a10e5e0798'
  - url: 'https://git.kernel.org/stable/c/121e9f80ea5478bca3a8f3f26593fd66f87da649'
  - url: 'https://git.kernel.org/stable/c/887902ca73490f38c69fd6149ef361a041cf912f'
  - url: 'https://git.kernel.org/stable/c/2aa87bd825377f5073b76701780a902cd0fc725a'
  - url: 'https://git.kernel.org/stable/c/4e28f79e3dffa52d327b46d1a78dac16efb5810b'
tags:
  - cve.org
epss: 0.0019
epssPercentile: 0.0867
ingestedAt: '2026-11-05T22:38:31.874Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

usb: chipidea: ci_hdrc_imx: fix usbmisc handling

usbmisc is an optional device property so it is totally valid for the
corresponding data->usbmisc_data to have a NULL value.

Check that before dereferencing the pointer.

Found by Linux Verification Center (linuxtesting.org) with Svace static
analysis tool.

## Affected

- `Linux >= 3f46fefab962fc5dcfe4d53a7c2cdccd51ebdc6d < 8060b719676e8c0e5a2222c2977ba0458d9d9535`
- `Linux >= 7ae96eba35036bdd47ecd956e882ff057a550405 < 0ee460498ced49196149197c9f6d29a10e5e0798`
- `Linux >= dcd4de31bd01a7189c24e3cafe40649c9c42b9af < 121e9f80ea5478bca3a8f3f26593fd66f87da649`
- `Linux >= 57797497a696cffaea421fc4e5a3ea2a8536b1a2 < 887902ca73490f38c69fd6149ef361a041cf912f`
- `Linux >= 74adad500346fb07d69af2c79acbff4adb061134 < 2aa87bd825377f5073b76701780a902cd0fc725a`
- `Linux >= 74adad500346fb07d69af2c79acbff4adb061134 < 4e28f79e3dffa52d327b46d1a78dac16efb5810b`
- `Linux >= 5.15.179 < 5.15.181`
- `Linux >= 6.1.129 < 6.1.136`
- `Linux >= 6.6.72 < 6.6.89`
- `Linux >= 6.12.10 < 6.12.26`
- `Linux 6.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.