Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-37994— usb: typec: ucsi: displayport: Fix NULL pointer access

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于UCSI驱动在合作伙伴移除前未等待所有任务完成。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.21% · P11

Possible ATT&CK Techniques 1 AI

T1211 · Exploitation for Stealth

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux af8622f6a585d8d82b11cd7987e082861fd0edd3< 9dda1e2a666a8a32ce0f153b5dee05c7351f1020 affected
af8622f6a585d8d82b11cd7987e082861fd0edd3< a9931f1b52b2d0bf3952e003fd5901ea7eb851ed affected
af8622f6a585d8d82b11cd7987e082861fd0edd3< 7804c4d63edfdd5105926cc291e806e8f4ce01b5 affected
af8622f6a585d8d82b11cd7987e082861fd0edd3< 076ab0631ed4928905736f1701e25f1e722bc086 affected
af8622f6a585d8d82b11cd7987e082861fd0edd3< 14f298c52188c34acde9760bf5abc669c5c36fdb affected
af8622f6a585d8d82b11cd7987e082861fd0edd3< 5ad298d6d4aebe1229adba6427e417e89a5208d8 affected
af8622f6a585d8d82b11cd7987e082861fd0edd3< e9b63faf5c97deb43fc39a52edbc39d626cc14bf affected
af8622f6a585d8d82b11cd7987e082861fd0edd3< 312d79669e71283d05c05cc49a1a31e59e3d9e0e affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-37994

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
usb: typec: ucsi: displayport: Fix NULL pointer access
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that the UCSI driver waits for all pending tasks in the ucsi_displayport_work workqueue to finish executing before proceeding with the partner removal.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于UCSI驱动在合作伙伴移除前未等待所有任务完成。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux af8622f6a585d8d82b11cd7987e082861fd0edd3 ~ 9dda1e2a666a8a32ce0f153b5dee05c7351f1020 -
Linux Linux 5.2 -

II. Public POCs for CVE-2025-37994

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-37994

请登录查看更多情报信息。

Patches & Fixes for CVE-2025-37994 (3)

Same Patch Batch · Linux · 2025-05-29 · 7 CVEs total

CVE-2025-37996 8.8 HIGH KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()
CVE-2025-37998 7.8 HIGH openvswitch: Fix unsafe attribute parsing in output_userspace()
CVE-2025-37997 7.8 HIGH netfilter: ipset: fix region locking in hash types
CVE-2025-37999 fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio()
CVE-2025-37995 module: ensure that kobject_put() is safe for module type kobjects
CVE-2025-37993 can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-37994

No comments yet

Leave a comment