In the Linux kernel, the following vulnerability has been resolved:
spi: spi-imx: Add check for spiimxsetupxfer()
Add check for the return value of spiimxsetupxfer(). spiimx->rx and spiimx->tx function pointer can be NULL when spiimxsetupxfer() return error, and make NULL pointer dereference.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Call trace: 0x0 spiimxpiotransfer+0x50/0xd8 spiimxtransferone+0x18c/0x858 spitransferonemessage+0x43c/0x790 _spipumptransfermessage+0x238/0x5d4 _spisync+0x2b0/0x454 spiwritethenread+0x11c/0x200
[
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b4479eb462ecb39001b38dfb331fc6028dedac8",
"signature_type": "Line",
"target": {
"file": "drivers/spi/spi-imx.c"
},
"id": "CVE-2025-37801-32c7e6e4",
"digest": {
"line_hashes": [
"336915763868767659350336396786856044924",
"282526113406545271335510225783424440831",
"314941806067937919332119874601100114005",
"244904868824888113972944017194440563447",
"208617942405684096812245132804625537472",
"145209106232977653834134197755211394827",
"321741582615967762102921759055420768672"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@055ef73bb1afc3f783a9a13b496770a781964a07",
"signature_type": "Line",
"target": {
"file": "drivers/spi/spi-imx.c"
},
"id": "CVE-2025-37801-42f10450",
"digest": {
"line_hashes": [
"336915763868767659350336396786856044924",
"282526113406545271335510225783424440831",
"135619515790755782521298753827320258937",
"23927245497138206085831637074607716203",
"185318494536946807657885655183325684681",
"321741582615967762102921759055420768672"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b4479eb462ecb39001b38dfb331fc6028dedac8",
"signature_type": "Function",
"target": {
"function": "spi_imx_transfer_one",
"file": "drivers/spi/spi-imx.c"
},
"id": "CVE-2025-37801-81206d33",
"digest": {
"length": 670.0,
"function_hash": "143086127238750754150497143176816503278"
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2fea0d6d7b5d27fbf55512d51851ba0a346ede52",
"signature_type": "Line",
"target": {
"file": "drivers/spi/spi-imx.c"
},
"id": "CVE-2025-37801-83bf4d77",
"digest": {
"line_hashes": [
"336915763868767659350336396786856044924",
"282526113406545271335510225783424440831",
"314941806067937919332119874601100114005",
"244904868824888113972944017194440563447",
"208617942405684096812245132804625537472",
"145209106232977653834134197755211394827",
"321741582615967762102921759055420768672"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@951a04ab3a2db4029debfa48d380ef834b93207e",
"signature_type": "Function",
"target": {
"function": "spi_imx_transfer_one",
"file": "drivers/spi/spi-imx.c"
},
"id": "CVE-2025-37801-875424b9",
"digest": {
"length": 576.0,
"function_hash": "115306093858621879567504745555016891985"
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@055ef73bb1afc3f783a9a13b496770a781964a07",
"signature_type": "Function",
"target": {
"function": "spi_imx_transfer_one",
"file": "drivers/spi/spi-imx.c"
},
"id": "CVE-2025-37801-998eab63",
"digest": {
"length": 576.0,
"function_hash": "115306093858621879567504745555016891985"
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@185d376875ea6fb4256b9dc97ee0b4d2b0fdd399",
"signature_type": "Function",
"target": {
"function": "spi_imx_transfer_one",
"file": "drivers/spi/spi-imx.c"
},
"id": "CVE-2025-37801-ae7ca902",
"digest": {
"length": 670.0,
"function_hash": "143086127238750754150497143176816503278"
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2fea0d6d7b5d27fbf55512d51851ba0a346ede52",
"signature_type": "Function",
"target": {
"function": "spi_imx_transfer_one",
"file": "drivers/spi/spi-imx.c"
},
"id": "CVE-2025-37801-b2e983cc",
"digest": {
"length": 669.0,
"function_hash": "149393065275460946984799499195381379495"
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@951a04ab3a2db4029debfa48d380ef834b93207e",
"signature_type": "Line",
"target": {
"file": "drivers/spi/spi-imx.c"
},
"id": "CVE-2025-37801-e6cbd715",
"digest": {
"line_hashes": [
"336915763868767659350336396786856044924",
"282526113406545271335510225783424440831",
"135619515790755782521298753827320258937",
"23927245497138206085831637074607716203",
"185318494536946807657885655183325684681",
"321741582615967762102921759055420768672"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@185d376875ea6fb4256b9dc97ee0b4d2b0fdd399",
"signature_type": "Line",
"target": {
"file": "drivers/spi/spi-imx.c"
},
"id": "CVE-2025-37801-fef6a9e6",
"digest": {
"line_hashes": [
"336915763868767659350336396786856044924",
"282526113406545271335510225783424440831",
"314941806067937919332119874601100114005",
"244904868824888113972944017194440563447",
"208617942405684096812245132804625537472",
"145209106232977653834134197755211394827",
"321741582615967762102921759055420768672"
],
"threshold": 0.9
},
"deprecated": false
}
]