CVE-2025-37784 net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
A NULL pointer dereference in the Linux kernel ICSS IEP driver allows local attackers to cause a system crash during signal disabling.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-37784?
CVE-2025-37784 is a medium-severity vulnerability in Linux kernel, published on 1 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
The ICSS IEP driver tracks perout and pps enable state with flags. Currently when disabling pps and perout signals during icss_iep_exit(), results in NULL pointer dereference for perout.
To fix the null pointer dereference issue, the icss_iep_perout_enable_hw function can be modified to directly clear the IEP CMP registers when disabling PPS or PEROUT, without referencing the ptp_perout_request structure, as its contents are irrelevant in this case.
Weakness: CWE-476
Which versions are affected by CVE-2025-37784?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-37784?
Apply the vendor's patch.
Is CVE-2025-37784 being exploited?
There is no known exploitation of CVE-2025-37784 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-37784, DEBIAN-CVE-2025-37784, GHSA-3qx4-pq69-7jwx, ROOT-OS-UBUNTU-2404-CVE-2025-37784, UBUNTU-CVE-2025-37784.