CVE-2025-37746: perf/dwc_pcie: fix duplicate pci_dev devices
In the Linux kernel, the following vulnerability has been resolved:
perf/dwcpcie: fix duplicate pcidev devices
During platformdeviceregister, wrongly using struct device pcidev as platformdata caused a kmemdup copy of pcidev. Worse still, accessing the duplicated device leads to list corruption as its mutex content (e.g., list, magic) remains the same as the original.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37746?
The severity of CVE-2025-37746 has not been explicitly classified but involves a potential security risk in the Linux kernel due to duplicate device handling.
How do I fix CVE-2025-37746?
To mitigate CVE-2025-37746, update the Linux kernel to the latest stable version where the vulnerability has been patched.
What systems are affected by CVE-2025-37746?
CVE-2025-37746 affects systems running the Linux Kernel that are using certain PCI device configurations.
What is the impact of CVE-2025-37746?
The impact of CVE-2025-37746 may include system instability or incorrect device management due to the duplicated pci_dev devices.
Is there a workaround for CVE-2025-37746?
While there is no official workaround for CVE-2025-37746, system administrators are encouraged to monitor updates from the Linux foundation and apply patches when available.