CVE-2025-38318

MEDIUM

Linux Kernel - Use-After-Free in perf arm-ni Driver

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Fix missing platform_set_drvdata() Add missing platform_set_drvdata in arm_ni_probe(), otherwise calling platform_get_drvdata() in remove returns NULL.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/8e43fa9c713a6d084a5732aa6dd41c734845f25e

Patch

https://git.kernel.org/stable/c/498129a868ce966af277841f7e32e9f76b3779ad

Patch

https://git.kernel.org/stable/c/fc5106088d6db75df61308ef6de314d1f7959646

Scores

CVSS v3 5.5

EPSS 0.0014

EPSS Percentile 4.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (11)

linux/Kernel 6.12.0 - 6.12.34linux

linux/Kernel 6.13.0 - 6.15.3linux

Linux/Linux < 6.12

Linux/Linux 4d5a7680f2b4d0c2955e1d9f9a594b050d637436 - 498129a868ce966af277841f7e32e9f76b3779ad

Linux/Linux 4d5a7680f2b4d0c2955e1d9f9a594b050d637436 - 8e43fa9c713a6d084a5732aa6dd41c734845f25e

Linux/Linux 4d5a7680f2b4d0c2955e1d9f9a594b050d637436 - fc5106088d6db75df61308ef6de314d1f7959646

Linux/Linux 6.12

Linux/Linux 6.12.34 - 6.12.*

Linux/Linux 6.15.3 - 6.15.*

Linux/Linux 6.16

... and 1 more

Published Jul 10, 2025

Tracked Since Feb 18, 2026