Riskcovery

CVE-2025-37974

s390/pci: Fix missing check for zpci_create_device() error return

State
Published
Severity
Not scored
Published
May 20, 2025
Updated
May 23, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/pci: Fix missing check for zpci_create_device() error return

The zpci_create_device() function returns an error pointer that needs to be checked before dereferencing it as a struct zpci_dev pointer. Add the missing check in __clp_add() where it was missed when adding the scan_list in the fixed commit. Simply not adding the device to the scan list results in the previous behavior.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1f3b309108fd0660ea8614a72328ba866ccd3378 to before be54b750c333a9db7c3b3686846bb06b07b011feAffected
  • 0467cdde8c4320bbfdb31a8cff1277b202f677fc to before 2769b718e164df983c20c314b263a71a699be6cdAffected
  • 0467cdde8c4320bbfdb31a8cff1277b202f677fc to before 42420c50c68f3e95e90de2479464f420602229fcAffected
  • 6.12.5 to before 6.12.29Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.12.29 through 6.12.*Not affected
  • 6.14.7 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.