CVE-2025-37746

MEDIUM

Linux kernel - Info Disclosure

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: perf/dwc_pcie: fix duplicate pci_dev devices During platform_device_register, wrongly using struct device pci_dev as platform_data caused a kmemdup copy of pci_dev. Worse still, accessing the duplicated device leads to list corruption as its mutex content (e.g., list, magic) remains the same as the original.

Scores

CVSS v3 5.5
EPSS 0.0009
EPSS Percentile 25.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-704
Status published
Products (2)
linux/Kernel 6.8.0 - 6.14.3linux
linux/linux_kernel 6.8 - 6.14.3
Published May 01, 2025
Tracked Since Feb 18, 2026