CVE-2025-37986

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-37986
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37986.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-37986
Downstream
Related
Published
2025-05-20T17:09:19Z
Modified
2025-10-18T01:32:57.355035Z
Summary
usb: typec: class: Invalidate USB device pointers on partner unregistration
Details

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: class: Invalidate USB device pointers on partner unregistration

To avoid using invalid USB device pointers after a Type-C partner disconnects, this patch clears the pointers upon partner unregistration. This ensures a clean state for future connections.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
59de2a56d127890cc610f3896d5fc31887c54ac2
Fixed
40966fc9939e85677fdb489dfddfa205baaad03b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
59de2a56d127890cc610f3896d5fc31887c54ac2
Fixed
74911338f47c13d1b9470fc50718182bffad42e2
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
59de2a56d127890cc610f3896d5fc31887c54ac2
Fixed
66e1a887273c6b89f09bc11a40d0a71d5a081a8e

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.3
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.14.1
v6.14.2
v6.14.3
v6.14.4
v6.15-rc1
v6.6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "id": "CVE-2025-37986-002d7e9b",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40966fc9939e85677fdb489dfddfa205baaad03b",
        "target": {
            "file": "drivers/usb/typec/class.c",
            "function": "typec_unregister_partner"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 366.0,
            "function_hash": "116295817690562584536345729612327413395"
        }
    },
    {
        "id": "CVE-2025-37986-36635b10",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40966fc9939e85677fdb489dfddfa205baaad03b",
        "target": {
            "file": "drivers/usb/typec/class.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "125159914309411023857835170940820370928",
                "230819059375948064697974958633940553035",
                "224159022708968995304002393867898901856",
                "308567433242623273038772411910193738864",
                "24395618761587867450549495162665969219",
                "22860139897711274251021179778329883390",
                "36474948017075962521573291645084203408"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-37986-3efb2402",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74911338f47c13d1b9470fc50718182bffad42e2",
        "target": {
            "file": "drivers/usb/typec/class.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "125159914309411023857835170940820370928",
                "230819059375948064697974958633940553035",
                "224159022708968995304002393867898901856",
                "308567433242623273038772411910193738864",
                "24395618761587867450549495162665969219",
                "22860139897711274251021179778329883390",
                "36474948017075962521573291645084203408"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-37986-65114418",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66e1a887273c6b89f09bc11a40d0a71d5a081a8e",
        "target": {
            "file": "drivers/usb/typec/class.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "125159914309411023857835170940820370928",
                "230819059375948064697974958633940553035",
                "224159022708968995304002393867898901856",
                "308567433242623273038772411910193738864",
                "24395618761587867450549495162665969219",
                "22860139897711274251021179778329883390",
                "36474948017075962521573291645084203408"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-37986-cf349cf1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74911338f47c13d1b9470fc50718182bffad42e2",
        "target": {
            "file": "drivers/usb/typec/class.c",
            "function": "typec_unregister_partner"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 366.0,
            "function_hash": "116295817690562584536345729612327413395"
        }
    },
    {
        "id": "CVE-2025-37986-fcbee09a",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66e1a887273c6b89f09bc11a40d0a71d5a081a8e",
        "target": {
            "file": "drivers/usb/typec/class.c",
            "function": "typec_unregister_partner"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 366.0,
            "function_hash": "116295817690562584536345729612327413395"
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.26
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.5