NULL Pointer Dereference in Linux Kernel Affecting es58x Driver

CVE-2025-21773

Summary

A vulnerability exists in the Linux kernel affecting the es58x driver, where a NULL pointer dereference could occur if an attacker successfully spoofed the USB device's serial number. The assumption that the device's serial number would always be present is not valid in all cases, as the driver failed to account for potential manipulation. As a result, a check for a NULL value should be integrated to ensure the integrity of the system and prevent exploitation.

References