CVEvulnerability

CVE-2025-38137

7.8 HIGH Published 2025-07-03 Modified 2026-10-21 Official page ↗

Status: Modified
Published: 2025-07-03
Last modified: 2026-10-21
Assigner: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-416

Description

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when unregistering It's possible to trigger use-after-free here by: (a) forcing rescan_work_func() to take a long time and (b) utilizing a pwrctrl driver that may be unloaded for some reason Cancel outstanding work to ensure it is finished before we allow our data structures to be cleaned up. [bhelgaas: tidy commit log]

Affected configurations

• linux linux kernel (>= 6.11.1 < 6.15.3) • linux linux kernel 6.11

Weakness · CWE (1)

CWE-416 Use After Free weakness

References

https://git.kernel.org/stable/c/8b926f237743f020518162c62b93cb7107a2b5eb Patch
https://git.kernel.org/stable/c/a63ed775f476ba81558bba24d7538836e1ffb823 git.kernel.org
https://git.kernel.org/stable/c/b3ad6d23fec23fbef382ce9ea640c37446593cf5 Patch

CVE-2025-38137

Description

Affected configurations

Related

Weakness · CWE (1)

References