Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38137

PCI/pwrctrl: Cancel outstanding rescan work when unregistering

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when unregistering It's possible to trigger use-after-free here by: (a) forcing rescan_work_func() to take a long time and (b) utilizing a pwrctrl driver that may be unloaded for some reason Cancel outstanding work to ensure it is finished before we allow our data structures to be cleaned up. [bhelgaas: tidy commit log]

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8f62819aaace77dd85037ae766eb767f8c4417ce to < a63ed775f476ba81558bba24d7538836e1ffb823affected
  • 8f62819aaace77dd85037ae766eb767f8c4417ce to < b3ad6d23fec23fbef382ce9ea640c37446593cf5affected
  • 8f62819aaace77dd85037ae766eb767f8c4417ce to < 8b926f237743f020518162c62b93cb7107a2b5ebaffected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.15.3 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References