Description
In the Linux kernel, the following vulnerability has been resolved: perf/dwc_pcie: fix duplicate pci_dev devices During platform_device_register, wrongly using struct device pci_dev as platform_data caused a kmemdup copy of pci_dev. Worse still, accessing the duplicated device leads to list corruption as its mutex content (e.g., list, magic) remains the same as the original.
Scores
CVSS v3
5.5
EPSS
0.0009
EPSS Percentile
25.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-704
Status
published
Products (2)
linux/Kernel
6.8.0 - 6.14.3linux
linux/linux_kernel
6.8 - 6.14.3
Published
May 01, 2025
Tracked Since
Feb 18, 2026