CVE-2025-22084

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> w1: fix NULL pointer dereference in probe<br /> <br /> The w1_uart_probe() function calls w1_uart_serdev_open() (which includes<br /> devm_serdev_device_open()) before setting the client ops via<br /> serdev_device_set_client_ops(). This ordering can trigger a NULL pointer<br /> dereference in the serdev controller&amp;#39;s receive_buf handler, as it assumes<br /> serdev-&gt;ops is valid when SERPORT_ACTIVE is set.<br /> <br /> This is similar to the issue fixed in commit 5e700b384ec1<br /> ("platform/chrome: cros_ec_uart: properly fix race condition") where<br /> devm_serdev_device_open() was called before fully initializing the<br /> device.<br /> <br /> Fix the race by ensuring client ops are set before enabling the port via<br /> w1_uart_serdev_open().