Critical NULL Pointer Dereference in Linux Kernel's mtk_iommu Package
Summary
CVE-2025-37748: In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group Currently, mtk_iommu calls during probe iommu_device_register before the hw_list fr... Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware and system resources. It provides essential services for all other parts of the system, including device drivers, system calls, and process management. The mtk_iommu package is responsible for handling memory management and input/output memory management units (IOMMUs) for MediaTek devices. This vulnerability exposes the kernel to potential crashes and instability due to improper initialization sequences.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the mtk_iommu package, specifically during the probe phase of the iommu_device_register function. The issue arises because the hw_list from driver data is not initialized before the function call, leading to a NULL pointer dereference when the hw_list is accessed using list_first_entry, which is not null safe. This can result in system crashes or unexpected behavior, making it critical to address this issue promptly.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
The CVE-2025-37748 vulnerability in the Linux kernel's mtk_iommu package poses a significant risk of system instability due to a NULL pointer dereference. It is crucial to update to the patched version 6.1.135-1 or later to mitigate this risk. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37748 is a vulnerability in the Linux kernel's mtk_iommu package that can lead to a NULL pointer dereference, potentially causing system crashes.
If exploited, this vulnerability can cause instability and crashes in systems utilizing the mtk_iommu package, particularly on MediaTek devices.
If you are using a version of the Linux kernel prior to 6.1.135-1, your system may be vulnerable. You can check your kernel version using the command 'uname -r'.
While there are no specific workarounds, it is advisable to monitor your system for unusual behavior and apply the patch as soon as possible.
You can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using just a manifest file like package-lock.json. You can also check if your application is affected by this vulnerability using the Vulert playground.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
