CVE-2025-37905: firmware: arm_scmi: Balance device refcount when destroying devices
Published May 20, 2025
·Updated
firmware: armscmi: Balance device refcount when destroying devices
Affected Software
14 affected componentsFixes available
Linux Linux kernel
Linux Linux kernel>=5.13<5.15.182
Linux Linux kernel>=5.16<6.1.138
Linux Linux kernel>=6.2<6.6.90
Linux Linux kernel>=6.7<6.12.28
Linux Linux kernel>=6.13<6.14.6
Linux Linux kernel=6.15-rc1
Linux Linux kernel=6.15-rc2
Linux Linux kernel=6.15-rc3
Linux Linux kernel=6.15-rc4
Linux Linux kernel=6.15-rc5
Debian Debian Linux=11.0
Microsoft azl3 kernel 6.6.85.1-4
Microsoft azl3 kernel 6.6.92.2-1
Remediation
Event History
May 20, 2025
CVE Published
via MITRE·03:21 PM
Data Sourced
via MITRE·03:21 PM
Description
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jul 11, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-37905?
CVE-2025-37905 has a medium severity rating due to potential impacts on device management in the Linux kernel.
2
How do I fix CVE-2025-37905?
To fix CVE-2025-37905, users should update their Linux kernel to the latest stable version where this vulnerability has been addressed.
3
Which versions of the Linux kernel are affected by CVE-2025-37905?
CVE-2025-37905 affects certain versions of the Linux kernel prior to the release that includes the patches for this vulnerability.
4
What components are impacted by CVE-2025-37905?
CVE-2025-37905 specifically impacts the arm_scmi firmware handling within the Linux kernel.
5
Can CVE-2025-37905 lead to further exploitation?
Yes, if left unpatched, CVE-2025-37905 could potentially allow attackers to exploit the device reference count imbalance in the Linux kernel.