Wind River Support Network

HomeDefectsLIN1023-12896

Fixed

LIN1023-12896 : Security Advisory - linux - CVE-2025-37811

Created: May 9, 2025 Updated: May 28, 2025

Resolved Date: May 25, 2025

Found In Version: 10.23.30.1

Fix Version: 10.23.30.17

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: chipidea: ci_hdrc_imx: fix usbmisc handling

usbmisc is an optional device property so it is totally valid for the
corresponding data->usbmisc_data to have a NULL value.

Check that before dereferencing the pointer.

Found by Linux Verification Center (linuxtesting.org) with Svace static
analysis tool.

CVEs

CVE-2025-37811