Linux Kernel UCSI Driver Vulnerability Affecting DisplayPort Functionality

CVE-2025-37994

What is CVE-2025-37994?

A vulnerability in the Linux kernel's UCSI driver for DisplayPort has been identified, which can result in a NULL pointer dereference. This issue occurs when the driver fails to properly manage the execution of pending tasks within the ucsi_displayport_work workqueue. If not handled correctly, this oversight can lead to potential system instability or application crashes upon partner removal. A fix has been implemented to ensure that this driver appropriately waits for all tasks to complete before proceeding, thereby enhancing operational integrity.

References