CVE-2025-37781: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-37781 was discovered in the Linux kernel and disclosed on May 1, 2025. The vulnerability affects the i2c-cros-ec-tunnel component when the EC driver is built-in, where the EC parent device cannot be found, leading to a NULL pointer dereference. This issue can also be reproduced by unbinding the controller driver and then loading the i2c-cros-ec-tunnel module or binding the device (NVD).

The vulnerability manifests as a NULL pointer dereference at address 0x0000000000000058 when accessing kernel memory. The issue occurs in supervisor mode during kernel operations, specifically in the eci2cprobe function of the i2ccrosec_tunnel module. The bug triggers a page fault with error code 0x0000, indicating a not-present page access, which results in a kernel oops (NVD).

When exploited, this vulnerability causes a kernel NULL pointer dereference, which results in a system crash (kernel oops). This affects system stability and can lead to denial of service conditions on affected Linux systems (NVD).

The vulnerability has been resolved in the Linux kernel through a patch that implements proper probe deferral when the parent EC device is not present. Users should update to the patched version of the kernel when available (NVD).