CVE-2025-37972

In the Linux kernel, the following vulnerability has been resolved: Input: mtk-pmic-keys - fix possible null pointer dereference In mtk_pmic_keys_probe, the regs parameter is only set if the button is parsed in the device tree. However, on hardware where the button is left floating, that node will most likely be removed not to enable that input. In that case the code will try to dereference a null pointer. Let's use the regs struct instead as it is defined for all supported platforms. Note that it is ok setting the key reg even if that latter is disabled as the interrupt won't be enabled anyway.

• CWE-476

• https://git.kernel.org/stable/c/09429ddb5a91e9e8f72cd18c012ec4171c2f85ecPatch
• https://git.kernel.org/stable/c/11cdb506d0fbf5ac05bf55f5afcb3a215c316490Patch
• https://git.kernel.org/stable/c/334d74a798463ceec02a41eb0e2354aaac0d6249Patch
• https://git.kernel.org/stable/c/619c05fb176c272ac6cecf723446b39723ee6d97Patch
• https://git.kernel.org/stable/c/90fa6015ff83ef1c373cc61b7c924ab2bcbe1801Patch
• https://lists.debian.org/debian-lts-announce/2025/08/msg00010.htmlThird Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html

Published

May 20, 2025

Last Modified

Jul 14, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-37967In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37968In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37969In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3797A vulnerability classified as critical was found in SeaCMS u…7.2
• CVE-2025-37970In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37971In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37973In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-37974In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37975In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-37976Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-37977In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-37978In the Linux kernel, the following vulnerability has been re…5.5