Riskcovery

CVE-2025-37986

usb: typec: class: Invalidate USB device pointers on partner unregistration

State
Published
Severity
Not scored
Published
May 20, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: class: Invalidate USB device pointers on partner unregistration

To avoid using invalid USB device pointers after a Type-C partner disconnects, this patch clears the pointers upon partner unregistration. This ensures a clean state for future connections.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 59de2a56d127890cc610f3896d5fc31887c54ac2 to before 40966fc9939e85677fdb489dfddfa205baaad03bAffected
  • 59de2a56d127890cc610f3896d5fc31887c54ac2 to before 74911338f47c13d1b9470fc50718182bffad42e2Affected
  • 59de2a56d127890cc610f3896d5fc31887c54ac2 to before 66e1a887273c6b89f09bc11a40d0a71d5a081a8eAffected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.12.26 through 6.12.*Not affected
  • 6.14.5 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.