Log in Start free

Vulnerability · Published Feb 27, 2025 · Assigned by Linux

CVE-2025-21746Input: synaptics - fix crash when enabling pass-through port

Medium 4.7

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)4.7Medium
Exploit odds (30 days)0.1%top 95.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash when enabling pass-through port When enabling a pass-through port an interrupt might come before psmouse driver binds to the pass-through port. However synaptics sub-driver tries to access psmouse instance presumably associated with the pass-through port to figure out if only 1 byte of response or entire protocol packet needs to be forwarded to the pass-through port and may crash if psmouse instance has not been attached to the port yet. Fix the crash by introducing open() and close() methods for the port and check if the port is open before trying to access psmouse instance. Because psmouse calls serio_open() only after attaching psmouse instance to serio port instance this prevents the potential crash.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.12.17-1DEBIAN-CVE-2025-21746
Debian:14linux6.12.17-1DEBIAN-CVE-2025-21746
Ubuntu:24.04:LTSlinux6.8.0-78.78USN-7703-1
Ubuntu:24.04:LTSlinux6.8.0-78.78UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-aws6.8.0-1035.37USN-7703-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1035.37UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1035.37~22.04.1UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1035.37~22.04.1USN-7703-2
Ubuntu:24.04:LTSlinux-azure6.8.0-1034.39UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1015.15~24.04.1UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1034.39~22.04.1UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1022.23UBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-gcp6.8.0-1036.38USN-7703-2
Ubuntu:24.04:LTSlinux-gcp6.8.0-1036.38UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1015.15~24.04.1UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1036.38~22.04.1USN-7703-2
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1036.38~22.04.1UBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-gke6.8.0-1032.36USN-7703-4
Ubuntu:24.04:LTSlinux-gke6.8.0-1032.36UBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1019.21UBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1019.21USN-7703-2
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-26.26~24.04.1UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-78.78~22.04.1UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-78.78~22.04.1USN-7703-4
Ubuntu:24.04:LTSlinux-ibm6.8.0-1033.33UBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-ibm6.8.0-1033.33USN-7703-2
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1033.33~22.04.1USN-7703-2
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1033.33~22.04.1UBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-78.78.1UBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-78.78.1USN-7703-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1014.15~24.04.1UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-78.78.1~22.04.1USN-7703-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-78.78.1~22.04.1UBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1035.38UBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1035.38USN-7703-4
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1010.10UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1035.38~22.04.1UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1035.38~22.04.1USN-7703-4
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1035.38.1USN-7703-4
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1035.38.1UBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1009.9UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1022.22UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-oracle6.8.0-1032.33USN-7703-3
Ubuntu:24.04:LTSlinux-oracle6.8.0-1032.33UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1032.33~22.04.1UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1032.33~22.04.1USN-7703-3
Ubuntu:24.04:LTSlinux-raspi6.8.0-1035.39USN-7703-4
Ubuntu:24.04:LTSlinux-raspi6.8.0-1035.39UBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-78.78~22.04.1UBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21746
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21746
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2025-21746

Affected products (as reported)

VendorProductVersions
Linux Linux 100e16959c3ca8cb7be788ed3e2c5867481f35f6 – before a2cbcd70133dc0d4d4c95ad4cd5412b935354c7c100e16959c3ca8cb7be788ed3e2c5867481f35f6 – before 3e179d3f1ada963475395d81bfe91daef4d1a24c100e16959c3ca8cb7be788ed3e2c5867481f35f6 – before 87da1ea93ec9f9f0004e5b12e78789bc94e360bf100e16959c3ca8cb7be788ed3e2c5867481f35f6 – before 08bd5b7c9a2401faabdaa1472d45c7de0755fd7e
Linux Linux 6.5

References