CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2025-37881
Medium (5.5). EPSS 0.3% chance of exploitation in the next 30 days.
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
The variable d->name, returned by devm_kasprintf(), could be NULL.
A pointer check is added to prevent potential NULL pointer dereference.
This is similar to the fix in commit 3027e7b15b02
("ice: Fix some null pointer dereference issues in ice_ptp.c").
This issue is found by our static analysis tool
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
- CWE
- CWE-476
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- linux:linux_kernel
References
- https://git.kernel.org/stable/c/052fb65335befeae8500e88d69ea022266baaf6d
- https://git.kernel.org/stable/c/36d68151712e525450f0fbb3045e7110f0d9b610
- https://git.kernel.org/stable/c/61006ca381b4d65d2b8ca695ea8da1ce18d6dee3
- https://git.kernel.org/stable/c/8c75f3e6a433d92084ad4e78b029ae680865420f
- https://git.kernel.org/stable/c/a777ccfb9ba8d43f745e41b69ba39d4a506a081e