Listen to this Post
The vulnerability CVE-2025-37994 is a NULL pointer dereference (CWE-476) in the Linux kernel’s USB Type-C UCSI DisplayPort driver. It is caused by an improper synchronization issue within the `ucsi_displayport_work` workqueue.
The flaw manifests during the disconnection sequence of a DisplayPort-alt-mode-capable USB-C device. When a partner device is removed, the driver’s cleanup routine proceeds to tear down structures without ensuring that all pending tasks in the `ucsi_displayport_work` workqueue have finished executing. This creates a race condition.
If a pending workqueue task is scheduled to run after its associated data structures have been freed during partner removal, the task will attempt to access memory that is no longer valid. This leads to a dereference of a NULL pointer. The consequence is a kernel crash (oops) or system instability, directly impacting the availability of the system. The issue requires local access and user privileges to trigger.
dailycve form
Platform: Linux Kernel
Version: Multiple versions
Vulnerability: NULL pointer dereference
Severity: Medium
date: 2025-05-29
Prediction: 2025-12-31
What Undercode Say:
Analytics
`uname -r` – Check running kernel version.
`grep CVE-2025-37994 /var/log/apt/history.log` – Check if update was applied (Debian/Ubuntu).
`yum list –installed kernel` – Check installed kernel packages (RHEL).
How Exploit:
A local user could trigger the flaw by repeatedly connecting and disconnecting a specific USB-C DisplayPort device, causing a race condition that crashes the kernel.
Protection from this CVE
Apply kernel updates. For Red Hat Enterprise Linux 9 and 10, apply updates via RHSA-2025:20518 and RHSA-2025:20095. For Ubuntu, apply relevant USN updates. For SUSE, apply the provided security update.
Impact:
System crash (Availability). No direct impact to confidentiality or integrity.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
