CVE-2025-37758

ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()

devm_ioremap() returns NULL on error. Currently, pxa_ata_probe() does not check for this case, which can result in a NULL pointer dereference.

Add NULL check after devm_ioremap() to prevent this issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2dc6c6f15da97cb3e810963c80e981f19d42cd7d to before a551f75401793ba8075d7f46ffc931ce5151f03fAffected
  • 2dc6c6f15da97cb3e810963c80e981f19d42cd7d to before 17d5e6e915fad5a261db3698c9c5bbe702102d7cAffected
  • 2dc6c6f15da97cb3e810963c80e981f19d42cd7d to before d0d720f9282839b9db625a376c02a1426a16b0aeAffected
  • 2dc6c6f15da97cb3e810963c80e981f19d42cd7d to before 2dc53c7a0c1f57b082931facafa804a7ca32a9a6Affected
  • 2dc6c6f15da97cb3e810963c80e981f19d42cd7d to before 5b09bf6243b0bc0ae58bd9efdf6f0de5546f8d06Affected
  • 2dc6c6f15da97cb3e810963c80e981f19d42cd7d to before ee2b0301d6bfe16b35d57947687c664ecb815775Affected
  • 2dc6c6f15da97cb3e810963c80e981f19d42cd7d to before c022287f6e599422511aa227dc6da37b58d9ceacAffected
  • 2dc6c6f15da97cb3e810963c80e981f19d42cd7d to before 2ba9e4c69207777bb0775c7c091800ecd69de144Affected
  • 2dc6c6f15da97cb3e810963c80e981f19d42cd7d to before ad320e408a8c95a282ab9c05cdf0c9b95e317985Affected
LinuxLinux
  • 2.6.36Affected
  • before 2.6.36Not affected
  • 5.4.293 through 5.4.*Not affected
  • 5.10.237 through 5.10.*Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.135 through 6.1.*Not affected
  • 6.6.88 through 6.6.*Not affected
  • 6.12.24 through 6.12.*Not affected
  • 6.13.12 through 6.13.*Not affected
  • 6.14.3 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.