In the Linux kernel, the following vulnerability has been resolved:
PCI/pwrctrl: Cancel outstanding rescan work when unregistering
It's possible to trigger use-after-free here by:
(a) forcing rescan_work_func() to take a long time and
(b) utilizing a pwrctrl driver that may be unloaded for some reason
Cancel outstanding work to ensure it is finished before we allow our data
structures to be cleaned up.
[bhelgaas: tidy commit log]
CVSS
No CVSS.
References
Configurations
No configuration.
History
03 Jul 2025, 09:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-07-03 09:15
Updated : 2025-07-03 15:13
NVD link : CVE-2025-38137
Mitre link : CVE-2025-38137
CVE.ORG link : CVE-2025-38137
JSON object : View
Products Affected
No product.
CWE
No CWE.