CVE-2025-22051

Summary

CVE-2025-22051 is a vulnerability affecting the Linux kernel that has been addressed. The issue lies within the gpib driver for the agilent usb dongle. Upon disconnection of the dongle, subsequent calls to the driver result in a NULL dereference Oops due to the bus_interface being set to NULL. This issue was caused by setting usb_dev from the bus_interface for dev_xxx messages. Previously, bus_interface was only checked for NULL in functions directly calling usb_fill_bulk_urb or usb_control_msg. Going forward, it is necessary to verify the validity of bus_interface on all interface entry points and return -ENODEV if it is NULL to prevent such Oops occurrences.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.