CVE-2025-37817

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mcb: fix a double free bug in chameleon_parse_gdd()

In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev' would be released in mcb_device_register() via put_device(). Thus, goto 'err' label and free 'mdev' again causes a double free. Just return if mcb_device_register() fails.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

VendorProductVersions
LinuxLinux>= 3764e82e5150d87b205c10cd78a9c9ab86fbfa51, < d70184958b0ea8c0fd52e2b456654b503e769fc8; >= 3764e82e5150d87b205c10cd78a9c9ab86fbfa51, < 4ffe8c9fb561e4427dd1a3056cd5b3685b74f78d; >= 3764e82e5150d87b205c10cd78a9c9ab86fbfa51, < 59f993cd36b6e28a394ba3d977e8ffe5c9884e3b; >= 3764e82e5150d87b205c10cd78a9c9ab86fbfa51, < c5b8a549ef1fcc6066b037a3962c79d60465ba0b; >= 3764e82e5150d87b205c10cd78a9c9ab86fbfa51, < 96838eb1836fd372e42be5db84f0b333b65146a6; >= 3764e82e5150d87b205c10cd78a9c9ab86fbfa51, < df1a5d5c6134224f9298e5189230f9d29ae50cac; >= 3764e82e5150d87b205c10cd78a9c9ab86fbfa51, < bcc7d58ee5173e34306026bd01e1fbf75e169d37; >= 3764e82e5150d87b205c10cd78a9c9ab86fbfa51, < 7c7f1bfdb2249f854a736d9b79778c7e5a29a150
LinuxLinux3.15

References

Timeline

Published
May 8, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-378185.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: Return NULL from huge_pte_offset() for invalid PMD LoongArcCVE-2025-378197.8In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACCVE-2025-37826.4The Cision Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and includiCVE-2025-378205.5In the Linux kernel, the following vulnerability has been resolved: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() The CVE-2025-378215.5In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash ThCVE-2025-378227.8In the Linux kernel, the following vulnerability has been resolved: riscv: uprobes: Add missing fence.i after building the XOL buffer The CVE-2025-378237.8In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly tCVE-2025-378245.5In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() syzbot reCVE-2025-378257.1In the Linux kernel, the following vulnerability has been resolved: nvmet: fix out-of-bounds access in nvmet_enable_port When trying to enCVE-2025-378265.5In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() CVE-2025-378275.5In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: return EIO on RAID1 block group write pointer mismatch TCVE-2025-378285.5In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() A race can occur
CVE-2025-37817: High severity, CVSS 7.8 | Vulnix