Wind River Support Network

HomeDefectsLIN1023-13099
Acknowledged

LIN1023-13099 : Security Advisory - linux - CVE-2025-37972

Created: May 21, 2025    Updated: May 30, 2025
Found In Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: mtk-pmic-keys - fix possible null pointer dereference

In mtk_pmic_keys_probe, the regs parameter is only set if the button is
parsed in the device tree. However, on hardware where the button is left
floating, that node will most likely be removed not to enable that
input. In that case the code will try to dereference a null pointer.

Let's use the regs struct instead as it is defined for all supported
platforms. Note that it is ok setting the key reg even if that latter is
disabled as the interrupt won't be enabled anyway.

CREATE(Triage):(User=admin) CVE-2025-37972 (https://nvd.nist.gov/vuln/detail/CVE-2025-37972)
Live chat
Online