w1: fix NULL pointer dereference in probe (Linux Linux)

CVE-2025-22084
MEDIUM 5.5

At a glance

Source
NVD
EPSS
EPSS 0.20 % · percentile 10 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: w1: fix NULL pointer dereference in probe The w1_uart_probe() function calls w1_uart_serdev_open() (which includes devm_serdev_device_open()) before setting the client ops via serdev_device_set_client_ops(). This ordering can trigger a NULL pointer dereference in the serdev controller's receive_buf handler, as it assumes serdev->ops is valid when SERPORT_ACTIVE is set. This is similar to the issue fixed in commit 5e700b384ec1 ("platform/chrome: cros_ec_uart: properly fix race condition") where devm_serdev_device_open() was called before fully initializing the device. Fix the race by ensuring client ops are set before enabling the port via w1_uart_serdev_open().

Weaknesses (CWE)

  • CWE-476 — NULL Pointer Dereference

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected a3c08804364e80328a9ffdac59bb26676b938195 < 4f750b84628080ff0d67bf1af67a4967b740acf2 ; affected a3c08804364e80328a9ffdac59bb26676b938195 < 64ab50577c59bb7049bec6b5c42d1c38e4029f29 ; affected a3c08804364e80328a9ffdac59bb26676b938195 < cc6b0ec7cccbf66ef3621e9e93296b7bd1f52298 ; affected a3c08804364e80328a9ffdac59bb26676b938195 < 0dd6770a72f138dabea9eae87f3da6ffa68f0d06
Linux · Linuxaffected 6.9 ; unaffected 0 < 6.9 ; unaffected 6.12.23 ≤ 6.12.* ; unaffected 6.13.11 ≤ 6.13.* ; unaffected 6.14.2 ≤ 6.14.* ; unaffected 6.15 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD