CVE-2025-21746

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash when enabling pass-through port When enabling a pass-through port an interrupt might come before psmouse driver binds to the pass-through port. However synaptics sub-driver tries to access psmouse instance presumably associated with the pass-through port to figure out if only 1 byte of response or entire protocol packet needs to be forwarded to the pass-through port and may crash if psmouse instance has not been attached to the port yet. Fix the crash by introducing open() and close() methods for the port and check if the port is open before trying to access psmouse instance. Because psmouse calls serio_open() only after attaching psmouse instance to serio port instance this prevents the potential crash.

SeverityMedium
CVSS4.7
Exploit probability—
ProductLinux Kernel
PublishedFeb 27, 2025
First seenFeb 27, 2025

How to fix

Update
  • linux linux_kernel6.6.80, 6.12.17, 6.13.3 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel6.5 ≤ v < 6.6.80, 6.7 ≤ v < 6.12.17, 6.13 ≤ v < 6.13.36.6.80, 6.12.17, 6.13.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-21746 · Linux Kernel · Dark Radar