PT-2025-28995 · Linux+6 · Linux Kernel+6
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The
qmp usb iomap() helper function in the Linux kernel returns the raw result of devm ioremap() for non-exclusive mappings. Because devm ioremap() can return a NULL pointer, and the caller only checks for errors using IS ERR(), a NULL pointer could bypass the check and lead to an invalid dereference. This issue is resolved by checking if devm ioremap() returns NULL, and if so, qmp usb iomap() returns an error pointer via IOMEM ERR PTR(-ENOMEM) to ensure safe and consistent error handling.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu