Critical NULL Pointer Dereference in Linux Kernel's UCSI Driver
Summary
CVE-2025-37994: In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that the UCSI driver waits for all pending tasks in the ucsi_displayport_work... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and versatility across various platforms. The UCSI (USB Type-C Connector System Software Interface) driver is responsible for managing USB Type-C connections, including DisplayPort functionality. This vulnerability exposes the kernel to potential crashes or undefined behavior due to improper handling of partner removal events.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the UCSI driver related to the DisplayPort functionality. The issue arises from a NULL pointer access when the driver attempts to remove a partner without ensuring that all pending tasks in the ucsi_displayport_work workqueue have completed. This oversight can lead to system crashes or instability, particularly when devices are disconnected unexpectedly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds to mitigate this vulnerability without applying the patch. Users are advised to avoid disconnecting USB Type-C devices unexpectedly until the kernel is updated.
Conclusion
The CVE-2025-37994 vulnerability in the Linux kernel's UCSI driver poses a significant risk of system instability due to NULL pointer dereference. Users are encouraged to update their systems to the patched version to mitigate this risk. Until then, caution should be exercised when handling USB Type-C connections.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37994 is a vulnerability in the Linux kernel's UCSI driver that can lead to a NULL pointer dereference, potentially causing system crashes.
The vulnerability affects Linux kernel versions in Debian 11, 12, and 13, with specific patches available for Debian 12.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
If an immediate update is not possible, avoid disconnecting USB Type-C devices unexpectedly to reduce the risk of triggering the vulnerability.
While the primary risk is system instability or crashes, it is advisable to back up important data regularly to prevent potential data loss.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
