Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-37746

perf/dwc_pcie: fix duplicate pci_dev devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: perf/dwc_pcie: fix duplicate pci_dev devices During platform_device_register, wrongly using struct device pci_dev as platform_data caused a kmemdup copy of pci_dev. Worse still, accessing the duplicated device leads to list corruption as its mutex content (e.g., list, magic) remains the same as the original.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • af9597adc2f1e3609c67c9792a2469bb64e43ae9 to < 0778c3e01a9f382a5bc444a5271e013406642501affected
  • af9597adc2f1e3609c67c9792a2469bb64e43ae9 to < a71c6fc87b2b9905dc2e38887fe4122287216be9affected
  • af9597adc2f1e3609c67c9792a2469bb64e43ae9 to < 7f35b429802a8065aa61e2a3f567089649f4d98eaffected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.14.3 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References