Tracker / CVE-2025-37748
CVE-2025-37748
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group Currently, mtk_iommu calls during probe iommu_device_register before the hw_list from driver data is initialized. Since iommu probing issue fix, it leads to NULL pointer dereference in mtk_iommu_device_group when hw_list is accessed with list_first_entry (not null safe). So, change the call order to ensure iommu_device_register is called after the driver data are initialized.
Affected products and versions
| debian | debian_linux |
|---|---|
| linux | linux_kernel |
| linux | linux_kernel · 5.19 → 6.1.135 |
| linux | linux_kernel · 6.13 → 6.13.12 |
| linux | linux_kernel · 6.14 → 6.14.3 |
| linux | linux_kernel · 6.2 → 6.6.88 |
| linux | linux_kernel · 6.7 → 6.12.24 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.