VYPR
Medium severity5.5NVD Advisory· Published May 8, 2025· Updated Jun 17, 2026

CVE-2025-37826

CVE-2025-37826

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()

Add a NULL check for the returned hwq pointer by ufshcd_mcq_req_to_hwq().

This is similar to the fix in commit 74736103fb41 ("scsi: ufs: core: Fix ufshcd_abort_one racing issue").

Affected products

7
  • Linux/Kernelllm-fuzzy6 versions
    (expand)+ 5 more
    • (no CPE)
    • (no CPE)range: 6.5
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.5,<6.12.26
    • cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*
  • osv-coords
    Range: >= 6.5.0, < 6.12.26

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.