Riskcovery

CVE-2025-37784

net: ti: icss-iep: Fix possible NULL pointer dereference for perout request

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
May 23, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ti: icss-iep: Fix possible NULL pointer dereference for perout request

The ICSS IEP driver tracks perout and pps enable state with flags. Currently when disabling pps and perout signals during icss_iep_exit(), results in NULL pointer dereference for perout.

To fix the null pointer dereference issue, the icss_iep_perout_enable_hw function can be modified to directly clear the IEP CMP registers when disabling PPS or PEROUT, without referencing the ptp_perout_request structure, as its contents are irrelevant in this case.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d6b130fabfe197935346fe9f1e50a0947b2b1be7 to before 7891619d21f07a88e0275d6d43db74035aa74f69Affected
  • 4ac8e8bf70b436294534d06e5d500e950e20c13d to before da5035d7aeadcfa44096dd34689bfed6c657f559Affected
  • 9b115361248dc6cce182a2dc030c1c70b0a9639e to before eeec66327001421531b3fb1a2ac32efc8a2493b0Affected
  • 9b115361248dc6cce182a2dc030c1c70b0a9639e to before 7349c9e9979333abfce42da5f9025598083b59c9Affected
  • 6.6.70 to before 6.6.88Affected
  • 6.12.9 to before 6.12.25Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.6.88 through 6.6.*Not affected
  • 6.12.25 through 6.12.*Not affected
  • 6.14.4 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.