Riskcovery

CVE-2025-37746

perf/dwc_pcie: fix duplicate pci_dev devices

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
Oct 21, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

perf/dwc_pcie: fix duplicate pci_dev devices

During platform_device_register, wrongly using struct device pci_dev as platform_data caused a kmemdup copy of pci_dev. Worse still, accessing the duplicated device leads to list corruption as its mutex content (e.g., list, magic) remains the same as the original.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • af9597adc2f1e3609c67c9792a2469bb64e43ae9 to before 0778c3e01a9f382a5bc444a5271e013406642501Affected
  • af9597adc2f1e3609c67c9792a2469bb64e43ae9 to before a71c6fc87b2b9905dc2e38887fe4122287216be9Affected
  • af9597adc2f1e3609c67c9792a2469bb64e43ae9 to before 7f35b429802a8065aa61e2a3f567089649f4d98eAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.14.3 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.