CVE-2025-22052

Summary

CVE-2025-22052: A vulnerability has been identified and resolved in the Linux kernel's gpib subsystem. When a USB dongle is disconnected, subsequent calls to the driver may cause a NULL dereference Oops due to the bus_interface being set to NULL on disconnect. This issue was caused by setting usb_dev from the bus_interface for dev_xxx messages. Previously, bus_interface was only checked for NULL in functions directly calling usb_fill_bulk_urb or usb_control_msg. To mitigate this, the Linux kernel now checks for a valid bus_interface on all interface entry points and returns -ENODEV if it is NULL.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.