CVE-2025-37836
09.05.2025, 07:16
In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pci_register_host_bridge() If device_register() fails, call put_device() to give up the reference to avoid a memory leak, per the comment at device_register(). Found by code review. [bhelgaas: squash Dan Carpenter's double free fix from https://lore.kernel.org/r/db806a6c-a91b-4e5a-a84b-6b7e01bdac85@stanley.mountain]Enginsight
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 4.10 ≤ 𝑥 < 5.10.237 |
| linux | linux_kernel | 5.11 ≤ 𝑥 < 5.15.181 |
| linux | linux_kernel | 5.16 ≤ 𝑥 < 6.1.136 |
| linux | linux_kernel | 6.2 ≤ 𝑥 < 6.6.89 |
| linux | linux_kernel | 6.7 ≤ 𝑥 < 6.12.24 |
| linux | linux_kernel | 6.13 ≤ 𝑥 < 6.13.12 |
| linux | linux_kernel | 6.14 ≤ 𝑥 < 6.14.3 |
| debian | debian_linux | 11.0 |
𝑥
= Vulnerable software versions
Debian Releases
References