Log in Start free

Vulnerability · Published Apr 1, 2025 · Assigned by Linux

CVE-2025-21917usb: renesas_usbhs: Flush the notify_hotplug_work

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.3%top 80.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Flush the notify_hotplug_work When performing continuous unbind/bind operations on the USB drivers available on the Renesas RZ/G2L SoC, a kernel crash with the message "Unable to handle kernel NULL pointer dereference at virtual address" may occur. This issue points to the usbhsc_notify_hotplug() function. Flush the delayed work to avoid its execution when driver resources are unavailable.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.133-1DEBIAN-CVE-2025-21917
Debian:13linux6.12.19-1DEBIAN-CVE-2025-21917
Debian:14linux6.12.19-1DEBIAN-CVE-2025-21917
Ubuntu:22.04:LTSlinux5.15.0-140.150UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux6.8.0-84.84UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux6.8.0-84.84USN-7764-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-aws5.15.0-1084.91UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-aws6.8.0-1039.41UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-aws6.8.0-1039.41USN-7764-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1039.41~22.04.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1039.41~22.04.1USN-7766-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1089.98UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-azure6.8.0-1038.44USN-7802-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1038.44UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1018.18~24.04.1UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1018.18~24.04.1USN-7628-1
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1036.42~22.04.1USN-7802-1
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1036.42~22.04.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1089.98.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1025.27UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1025.27USN-7809-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1083.92UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-gcp6.8.0-1040.42UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-gcp6.8.0-1040.42USN-7764-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1016.16~24.04.1USN-7605-1
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1016.16~24.04.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1040.42~22.04.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1040.42~22.04.1USN-7766-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1081.87UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-gke6.8.0-1036.40USN-7764-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1036.40UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1066.74UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1023.25UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1023.25USN-7764-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-28.28~24.04.1USN-7605-1
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-28.28~24.04.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-85.85~22.04.1USN-7801-1
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-84.84~22.04.1USN-7764-2
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-85.85~22.04.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-ibm5.15.0-1076.79UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-ibm6.8.0-1037.37UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-ibm6.8.0-1037.37USN-7779-1
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1037.37~22.04.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1037.37~22.04.1USN-7779-1
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1079.85UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-kvm5.15.0-1080.85UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-140.150UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-84.84.1UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-84.84.1USN-7764-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1015.16~24.04.2UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1015.16~24.04.2USN-7605-2
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-84.84.1~22.04.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-84.84.1~22.04.1USN-7764-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1078.79UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1039.42USN-7765-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1039.42UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1012.12UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1039.42~22.04.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1039.42~22.04.1USN-7765-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1039.42.1USN-7765-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1039.42.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1037.37UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1010.10UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1026.26UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1024.24UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1024.24USN-7606-1
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-oracle5.15.0-1081.87UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-oracle6.8.0-1037.38USN-7801-2
Ubuntu:24.04:LTSlinux-oracle6.8.0-1037.38UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1037.38~22.04.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1037.38~22.04.1USN-7801-3
Ubuntu:22.04:LTSlinux-raspi5.15.0-1078.81UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-raspi6.8.0-1039.43USN-7790-1
Ubuntu:24.04:LTSlinux-raspi6.8.0-1039.43UBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-84.84~22.04.1UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21917
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1018.19UBUNTU-CVE-2025-21917
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1050.54UBUNTU-CVE-2025-21917

Affected products (as reported)

VendorProductVersions
Linux Linux bc57381e634782009b1cb2e86b18013699ada576 – before 4cd847a7b630a85493d0294ad9542c21aafaa246bc57381e634782009b1cb2e86b18013699ada576 – before 394965f90454d6f00fe11879142b720c6c1a872ebc57381e634782009b1cb2e86b18013699ada576 – before 3248c1f833f924246cb98ce7da4569133c1b2292bc57381e634782009b1cb2e86b18013699ada576 – before 4ca078084cdd5f32d533311d6a0b63a60dcadd41bc57381e634782009b1cb2e86b18013699ada576 – before d50f5c0cd949593eb9a3d822b34d7b50046a06b7bc57381e634782009b1cb2e86b18013699ada576 – before e5aac1c9b2974636db7ce796ffa6de88fa08335ebc57381e634782009b1cb2e86b18013699ada576 – before 830818c8e70c0364e377f0c243b28061ef7967ebbc57381e634782009b1cb2e86b18013699ada576 – before 552ca6b87e3778f3dd5b87842f95138162e16c82
Linux Linux 3.0

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References