PT-2025-22167 · Linux +5 · Linux Kernel +5

Published

2025-04-08

·

Updated

2025-09-02

·

CVE-2025-37905

CVSS v2.0
1.4
VectorAV:L/AC:L/Au:M/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability in the Linux kernel has been resolved, related to the firmware arm scmi. The issue arises when using device find child() to lookup the proper SCMI device to destroy, causing an unbalance in device refcount. This prevents the call of the provided release methods upon devices destruction, resulting in structures not being freed properly. KMemleak detects this situation when loading/unloading some SCMI driver causes related devices to be created/destroyed without calling any device release method.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2025-12367
CVE-2025-37905
DLA-4271-1
DSA-5925-1
ECHO-9952-763D-031D
MGASA-2025-0182
MGASA-2025-0183
SUSE-SU-2025:01964-1
SUSE-SU-2025:01965-1
SUSE-SU-2025:02923-1
SUSE-SU-2025_01964-1
SUSE-SU-2025_01965-1
SUSE-SU-2025_02000-1
SUSE-SU-2025_02254-1
SUSE-SU-2025_02307-1
SUSE-SU-2025_02333-1
USN-7649-1
USN-7649-2
USN-7650-1
USN-7654-1
USN-7654-2
USN-7654-3
USN-7654-4
USN-7654-5
USN-7655-1
USN-7665-1
USN-7665-2
USN-7686-1
USN-7711-1
USN-7712-1
USN-7712-2
USN-7721-1

Affected Products

Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu