CVE - CVE-2025-37748

CVE-ID
CVE-2025-37748	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group Currently, mtk_iommu calls during probe iommu_device_register before the hw_list from driver data is initialized. Since iommu probing issue fix, it leads to NULL pointer dereference in mtk_iommu_device_group when hw_list is accessed with list_first_entry (not null safe). So, change the call order to ensure iommu_device_register is called after the driver data are initialized.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2f75cb27bef43c8692b0f5e471e5632f6a9beb99 URL:https://git.kernel.org/stable/c/2f75cb27bef43c8692b0f5e471e5632f6a9beb99 MISC:https://git.kernel.org/stable/c/38e8844005e6068f336a3ad45451a562a0040ca1 URL:https://git.kernel.org/stable/c/38e8844005e6068f336a3ad45451a562a0040ca1 MISC:https://git.kernel.org/stable/c/69f9d2d37d1207c5a73dac52a4ce1361ead707f5 URL:https://git.kernel.org/stable/c/69f9d2d37d1207c5a73dac52a4ce1361ead707f5 MISC:https://git.kernel.org/stable/c/6abd09bed43b8d83d461e0fb5b9a200a06aa8a27 URL:https://git.kernel.org/stable/c/6abd09bed43b8d83d461e0fb5b9a200a06aa8a27 MISC:https://git.kernel.org/stable/c/a0842539e8ef9386c070156103aff888e558a60c URL:https://git.kernel.org/stable/c/a0842539e8ef9386c070156103aff888e558a60c MISC:https://git.kernel.org/stable/c/ce7d3b2f6f393fa35f0ea12861b83a1ca28b295c URL:https://git.kernel.org/stable/c/ce7d3b2f6f393fa35f0ea12861b83a1ca28b295c
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)