CVE-2025-22052

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: gpib: Fix Oops after disconnect in ni_usb

If the usb dongle is disconnected subsequent calls to the driver cause a NULL dereference Oops as the bus_interface is set to NULL on disconnect.

This problem was introduced by setting usb_dev from the bus_interface for dev_xxx messages.

Previously bus_interface was checked for NULL only in the the functions directly calling usb_fill_bulk_urb or usb_control_msg.

Check for valid bus_interface on all interface entry points and return -ENODEV if it is NULL.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 4934b98bb24327c32ed55c96012f019932383da5, < b2d8d7959077c5d4b11d0dc6bd2167791fd1c72e; >= 4934b98bb24327c32ed55c96012f019932383da5, < 5dc98ba6f7304c188b267ef481281849638447bf; >= 4934b98bb24327c32ed55c96012f019932383da5, < a239c6e91b665f1837cf57b97fe638ef1baf2e78
LinuxLinux6.13

References

Timeline

Published
Apr 16, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-220535.5In the Linux kernel, the following vulnerability has been resolved: net: ibmveth: make veth_pool_store stop hanging v2: - Created a singleCVE-2025-220545.5In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pci_probe() devm_kasprintf() returnsCVE-2025-220555.5In the Linux kernel, the following vulnerability has been resolved: net: fix geneve_opt length integer overflow struct geneve_opt uses 5 bCVE-2025-220567.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When hanCVE-2025-220575.5In the Linux kernel, the following vulnerability has been resolved: net: decrease cached dst counters in dst_release Upstream fix ac888d58CVE-2025-220585.5In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak. Matt Dowling reported a weird UDP memCVE-2025-220595.5In the Linux kernel, the following vulnerability has been resolved: udp: Fix multiple wraparounds of sk->sk_rmem_alloc. __udp_enqueue_scheCVE-2025-22064.8A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0. This affects an unknown part of the file /sys/CVE-2025-220604.7In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCVE-2025-220615.5In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix qid report in airoha_tc_get_htb_get_leaf_queue() Fix CVE-2025-220625.5In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in proc_sctp_do_udp_port() We must serializCVE-2025-220635.5In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
CVE-2025-22052: Medium severity, CVSS 5.5 | Vulnix