Threats tagged 'ghsa-mrq3-qx26-xjxj'

CVE-2025-37781 is a Linux kernel vulnerability in the i2c-cros-ec-tunnel driver where a NULL pointer dereference occurs if the parent Embedded Controller (EC) device is not present. This happens when both the i2c-cros-ec-tunnel and the EC driver are built-in, or when the controller driver is unbound and the tunnel module is loaded or bound. The issue leads to a kernel crash (NULL pointer dereference).