Threats tagged 'ghsa-73pc-m2pm-2mr8'

CVE-2025-22084 is a medium severity vulnerability in the Linux kernel's w1 driver. It involves a NULL pointer dereference caused by calling w1_uart_serdev_open() before setting client operations, leading to a race condition. This flaw can cause a denial of service via kernel crash due to the NULL pointer dereference in the serdev controller's receive buffer handler. The issue is fixed by ensuring client operations are set before enabling the port.