CVE-2025-22051

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A problem in the Linux kernel has been identified where disconnecting the agilent usb dongle causes subsequent calls to the driver to result in a NULL dereference Oops. This occurs because the bus interface is set to NULL on disconnect. The issue was introduced by setting usb dev from the bus interface for dev xxx messages, and it was previously only checked for NULL in functions directly calling usb fill bulk urb or usb control msg. To fix this, checks for a valid bus interface have been added to all interface entry points, returning -ENODEV if it is NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.