SB20250502199 - NULL pointer dereference in Linux kernel ata driver
Published: May 2, 2025 Updated: May 10, 2025
Security Bulletin ID
SB20250502199
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2025-37758)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the pxa_ata_probe() function in drivers/ata/pata_pxa.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/17d5e6e915fad5a261db3698c9c5bbe702102d7c
- https://git.kernel.org/stable/c/2ba9e4c69207777bb0775c7c091800ecd69de144
- https://git.kernel.org/stable/c/2dc53c7a0c1f57b082931facafa804a7ca32a9a6
- https://git.kernel.org/stable/c/5b09bf6243b0bc0ae58bd9efdf6f0de5546f8d06
- https://git.kernel.org/stable/c/a551f75401793ba8075d7f46ffc931ce5151f03f
- https://git.kernel.org/stable/c/ad320e408a8c95a282ab9c05cdf0c9b95e317985
- https://git.kernel.org/stable/c/c022287f6e599422511aa227dc6da37b58d9ceac
- https://git.kernel.org/stable/c/d0d720f9282839b9db625a376c02a1426a16b0ae
- https://git.kernel.org/stable/c/ee2b0301d6bfe16b35d57947687c664ecb815775
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.24