CVE-2025-37748

What it is

In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group Currently, mtk_iommu calls during probe iommu_device_register before the hw_list from driver data is initialized. Since iommu probing issue fix, it leads to NULL pointer dereference in mtk_iommu_device_group when hw_list is accessed with list_first_entry (not null safe). So, change the call order to ensure iommu_device_register is called after the driver data are initialized.

At a glance

Exploitability

Can be exploited locally on the machine with a low-privilege account. High risk of service disruption.

Exploit odds

0.2% chance of exploitation in the next 30 days (EPSS).

Fix

A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

1. 2025-05-01 13:15 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-06-17 09:15 UTC Last updatedMost recent change to the record

Details

Published

2025-05-01 13:15 UTC

Last modified

2026-06-17 09:15 UTC

Exploit probability

0.2% · EPSS, next 30 days

Weakness

CWE-476 · NULL pointer dereference

Record status

Analyzed

Affected

• Linux Kernel < 6.1.135
• Linux Kernel < 6.6.88
• Linux Kernel < 6.12.24
• Linux Kernel < 6.13.12
• Linux Kernel < 6.14.3
• Linux Kernel 6.15
• Debian Linux 11.0

Attack profile CVSS 3.1 · 5.5

Attack vector

Local

Complexity

Low

Privileges needed

Low

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High