CVE-2025-37748
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-37748
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37748.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-37748
- Downstream
- Related
- Published
- 2025-05-01T13:15:53Z
- Modified
- 2025-08-09T20:01:25Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
iommu/mediatek: Fix NULL pointer deference in mtkiommudevice_group
Currently, mtkiommu calls during probe iommudeviceregister before the hwlist from driver data is initialized. Since iommu probing issue fix, it leads to NULL pointer dereference in mtkiommudevicegroup when hwlist is accessed with listfirstentry (not null safe).
So, change the call order to ensure iommudeviceregister is called after the driver data are initialized.
- References
-
- https://git.kernel.org/stable/c/2f75cb27bef43c8692b0f5e471e5632f6a9beb99
- https://git.kernel.org/stable/c/38e8844005e6068f336a3ad45451a562a0040ca1
- https://git.kernel.org/stable/c/69f9d2d37d1207c5a73dac52a4ce1361ead707f5
- https://git.kernel.org/stable/c/6abd09bed43b8d83d461e0fb5b9a200a06aa8a27
- https://git.kernel.org/stable/c/a0842539e8ef9386c070156103aff888e558a60c
- https://git.kernel.org/stable/c/ce7d3b2f6f393fa35f0ea12861b83a1ca28b295c