In the Linux kernel, the following vulnerability has been resolved:
driver core: fix potential NULL pointer dereference in dev_uevent()
If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev->driver from a valid pointer to NULL may result in crash. Fix this by using READ_ONCE() when fetching the pointer, and take bus' drivers klist lock to make sure driver instance will not disappear while we access it.
Use WRITE_ONCE() when setting the driver pointer to ensure there is no tearing.
[
{
"id": "CVE-2025-37800-059042c4",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/bus.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3781e4b83e174364998855de777e184cf0b62c40",
"digest": {
"line_hashes": [
"77347844309106613409316808260324157609",
"231790324521024174847201634113078785069",
"11456492664076326642236432310627068560",
"192996030249345495861541689772531699987"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-37800-0a1a7df4",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/base.h"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3781e4b83e174364998855de777e184cf0b62c40",
"digest": {
"line_hashes": [
"220628842471780816078717107937345139542",
"224888936453903655794759249800832946429",
"28093798931616244176817512248342573870",
"116847652211506157846266303854070793717",
"234411071860290903060397327892696634254",
"92273363465738403009668233095215568126",
"178334081556864964087465151755691337417",
"116637592369924726503214619192984050127"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-37800-0ece4942",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dev_uevent",
"file": "drivers/base/core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@abe56be73eb10a677d16066f65ff9d30251f5eee",
"digest": {
"length": 1673.0,
"function_hash": "293081397283626454223386283898594910210"
}
},
{
"id": "CVE-2025-37800-271732a8",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "device_set_driver",
"file": "drivers/base/base.h"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18daa52418e7e4629ed1703b64777294209d2622",
"digest": {
"length": 110.0,
"function_hash": "145957364845651142858866143589832950262"
}
},
{
"id": "CVE-2025-37800-28a70270",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dev_uevent",
"file": "drivers/base/core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18daa52418e7e4629ed1703b64777294209d2622",
"digest": {
"length": 1673.0,
"function_hash": "293081397283626454223386283898594910210"
}
},
{
"id": "CVE-2025-37800-311ca135",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@abe56be73eb10a677d16066f65ff9d30251f5eee",
"digest": {
"line_hashes": [
"215876890544465564367515343412983388569",
"241469035674703502327574020617975483364",
"82119782448733169635028687696112863074",
"300416527163248841255370118771391693913",
"269451119439250791795044809265354463256",
"56474284666768553291287740884347662686",
"319420844545079923798268098964942346639",
"153895751419167423482071788621925445624"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-37800-431fd17c",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "device_set_driver",
"file": "drivers/base/base.h"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@abe56be73eb10a677d16066f65ff9d30251f5eee",
"digest": {
"length": 110.0,
"function_hash": "145957364845651142858866143589832950262"
}
},
{
"id": "CVE-2025-37800-57e9bbe8",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bus_to_subsys",
"file": "drivers/base/bus.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18daa52418e7e4629ed1703b64777294209d2622",
"digest": {
"length": 535.0,
"function_hash": "42982538617598266609407594521896574208"
}
},
{
"id": "CVE-2025-37800-594952ad",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bus_to_subsys",
"file": "drivers/base/bus.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@abe56be73eb10a677d16066f65ff9d30251f5eee",
"digest": {
"length": 535.0,
"function_hash": "42982538617598266609407594521896574208"
}
},
{
"id": "CVE-2025-37800-6756ff99",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bus_to_subsys",
"file": "drivers/base/bus.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3781e4b83e174364998855de777e184cf0b62c40",
"digest": {
"length": 535.0,
"function_hash": "42982538617598266609407594521896574208"
}
},
{
"id": "CVE-2025-37800-6bc00f8b",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3781e4b83e174364998855de777e184cf0b62c40",
"digest": {
"line_hashes": [
"215876890544465564367515343412983388569",
"241469035674703502327574020617975483364",
"82119782448733169635028687696112863074",
"300416527163248841255370118771391693913",
"269451119439250791795044809265354463256",
"56474284666768553291287740884347662686",
"319420844545079923798268098964942346639",
"153895751419167423482071788621925445624"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-37800-6df3b387",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/bus.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@abe56be73eb10a677d16066f65ff9d30251f5eee",
"digest": {
"line_hashes": [
"77347844309106613409316808260324157609",
"231790324521024174847201634113078785069",
"11456492664076326642236432310627068560",
"192996030249345495861541689772531699987"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-37800-7c71b11a",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/bus.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b344e779d9afd0fcb5ee4000e4d0fc7d8d867eb",
"digest": {
"line_hashes": [
"77347844309106613409316808260324157609",
"231790324521024174847201634113078785069",
"11456492664076326642236432310627068560",
"192996030249345495861541689772531699987"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-37800-8492ddfb",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "device_set_driver",
"file": "drivers/base/base.h"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3781e4b83e174364998855de777e184cf0b62c40",
"digest": {
"length": 110.0,
"function_hash": "145957364845651142858866143589832950262"
}
},
{
"id": "CVE-2025-37800-882ae6a5",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/base.h"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b344e779d9afd0fcb5ee4000e4d0fc7d8d867eb",
"digest": {
"line_hashes": [
"220628842471780816078717107937345139542",
"224888936453903655794759249800832946429",
"28093798931616244176817512248342573870",
"116847652211506157846266303854070793717",
"234411071860290903060397327892696634254",
"92273363465738403009668233095215568126",
"178334081556864964087465151755691337417",
"116637592369924726503214619192984050127"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-37800-896ae868",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/bus.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18daa52418e7e4629ed1703b64777294209d2622",
"digest": {
"line_hashes": [
"77347844309106613409316808260324157609",
"231790324521024174847201634113078785069",
"11456492664076326642236432310627068560",
"192996030249345495861541689772531699987"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-37800-8adf3d8f",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/base.h"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@abe56be73eb10a677d16066f65ff9d30251f5eee",
"digest": {
"line_hashes": [
"220628842471780816078717107937345139542",
"224888936453903655794759249800832946429",
"28093798931616244176817512248342573870",
"72439396674488173334573857078386455930",
"234411071860290903060397327892696634254",
"92273363465738403009668233095215568126",
"178334081556864964087465151755691337417",
"116637592369924726503214619192984050127"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-37800-92f015d5",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dev_uevent",
"file": "drivers/base/core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3781e4b83e174364998855de777e184cf0b62c40",
"digest": {
"length": 1673.0,
"function_hash": "293081397283626454223386283898594910210"
}
},
{
"id": "CVE-2025-37800-9ea1e783",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dev_uevent",
"file": "drivers/base/core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b344e779d9afd0fcb5ee4000e4d0fc7d8d867eb",
"digest": {
"length": 1673.0,
"function_hash": "293081397283626454223386283898594910210"
}
},
{
"id": "CVE-2025-37800-bd32360c",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18daa52418e7e4629ed1703b64777294209d2622",
"digest": {
"line_hashes": [
"215876890544465564367515343412983388569",
"241469035674703502327574020617975483364",
"82119782448733169635028687696112863074",
"300416527163248841255370118771391693913",
"269451119439250791795044809265354463256",
"56474284666768553291287740884347662686",
"319420844545079923798268098964942346639",
"153895751419167423482071788621925445624"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-37800-bd55a754",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/base.h"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18daa52418e7e4629ed1703b64777294209d2622",
"digest": {
"line_hashes": [
"220628842471780816078717107937345139542",
"224888936453903655794759249800832946429",
"28093798931616244176817512248342573870",
"116847652211506157846266303854070793717",
"234411071860290903060397327892696634254",
"92273363465738403009668233095215568126",
"178334081556864964087465151755691337417",
"116637592369924726503214619192984050127"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-37800-d95b837d",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "device_set_driver",
"file": "drivers/base/base.h"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b344e779d9afd0fcb5ee4000e4d0fc7d8d867eb",
"digest": {
"length": 110.0,
"function_hash": "145957364845651142858866143589832950262"
}
},
{
"id": "CVE-2025-37800-e2b24daa",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bus_to_subsys",
"file": "drivers/base/bus.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b344e779d9afd0fcb5ee4000e4d0fc7d8d867eb",
"digest": {
"length": 535.0,
"function_hash": "42982538617598266609407594521896574208"
}
},
{
"id": "CVE-2025-37800-f90ad37c",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/base/core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b344e779d9afd0fcb5ee4000e4d0fc7d8d867eb",
"digest": {
"line_hashes": [
"215876890544465564367515343412983388569",
"241469035674703502327574020617975483364",
"82119782448733169635028687696112863074",
"300416527163248841255370118771391693913",
"269451119439250791795044809265354463256",
"56474284666768553291287740884347662686",
"319420844545079923798268098964942346639",
"153895751419167423482071788621925445624"
],
"threshold": 0.9
}
}
]