DEBIAN-CVE-2025-37800
- Source
- https://security-tracker.debian.org/tracker/CVE-2025-37800
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-37800.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2025-37800
- Upstream
- Published
- 2025-05-08T07:15:50Z
- Modified
- 2025-09-19T06:20:28Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent() If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev->driver from a valid pointer to NULL may result in crash. Fix this by using READONCE() when fetching the pointer, and take bus' drivers klist lock to make sure driver instance will not disappear while we access it. Use WRITE_ONCE() when setting the driver pointer to ensure there is no tearing.
- References
Affected packages
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:14 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source