CVE-2025-37972: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-37972 is a vulnerability discovered in the Linux kernel affecting the MTK PMIC keys driver. The vulnerability was disclosed on May 20, 2025, and involves a potential null pointer dereference in the mtkpmickeys_probe function (NVD).

The vulnerability occurs in the mtkpmickeys_probe function where the regs parameter is only set if the button is parsed in the device tree. On hardware where the button is left floating, the node will likely be removed to disable that input, leading to a potential null pointer dereference. The issue arises because the code attempts to dereference a null pointer in such cases (NVD).

The vulnerability could lead to a system crash or denial of service condition when the affected code path is triggered, particularly on systems using the MTK PMIC keys driver with specific hardware configurations (NVD).

The vulnerability has been fixed in Linux kernel version 6.1.140-1 for the Debian stable distribution (bookworm). The fix involves using the regs struct instead of the regs parameter, as it is defined for all supported platforms (Debian Security).