Search/CVE-2025-37916

● CVE — High

CVE-2025-37916

VendorlinuxProductlinux kernelDiscoveredMay 20, 2025UpdatedNov 17, 2025

In the Linux kernel, the following vulnerability has been resolved: pds_core: remove write-after-free of client_id A use-after-free error popped up in stress testing: [Mon Apr 21 21:21:33 2025] BUG: KFENCE: use-after-free write in pdsc_auxbus_dev_del+0xef/0x160 [pds_core] [Mon Apr 21 21:21:33 2025] Use-after-free write at 0x000000007013ecd1 (in kfence-#47): [Mon Apr 21 21:21:33 2025] pdsc_auxbus_dev_del+0xef/0x160 [pds_core] [Mon Apr 21 21:21:33 2025] pdsc_remove+0xc0/0x1b0 [pds_core] [Mon Apr 21 21:21:33 2025] pci_device_remove+0x24/0x70 [Mon Apr 21 21:21:33 2025] device_release_driver_internal+0x11f/0x180 [Mon Apr 21 21:21:33 2025] driver_detach+0x45/0x80 [Mon Apr 21 21:21:33 2025] bus_remove_driver+0x83/0xe0 [Mon Apr 21 21:21:33 2025] pci_unregister_driver+0x1a/0x80 The actual device…

View graph Watch Export

CVSS v3.1

7.8 HIGH

EPSS

0.23%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Oct 22, 2026

▲ 0.03pp

0.20% → 0.23% over 5 tracked changes

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Connections

21 relationships

CWE-416

source

Timeline

disclosure → media coverage

May 20, 2025

Disclosure — published as a CVE record. · last revised by NVD Nov 17, 2025

Jul 22, 2025

ubuntu.com reports: USN-7649-2: Linux kernel (AWS) vulnerabilities

Jul 22, 2025

ubuntu.com reports: USN-7665-1: Linux kernel (Oracle) vulnerabilities

Jul 24, 2025

ubuntu.com reports: USN-7665-2: Linux kernel (AWS) vulnerabilities

Feb 11, 2026

ubuntu.com reports: USN-8028-1: Linux kernel vulnerabilities

Feb 12, 2026

ubuntu.com reports: USN-8028-2: Linux kernel (Real-time) vulnerabilities

Feb 12, 2026

ubuntu.com reports: USN-8031-1: Linux kernel (GCP) vulnerabilities

Feb 17, 2026

ubuntu.com reports: USN-8028-3: Linux kernel (Real-time) vulnerabilities

Feb 17, 2026

ubuntu.com reports: USN-8028-4: Linux kernel (FIPS) vulnerabilities

Feb 17, 2026

ubuntu.com reports: USN-8028-5: Linux kernel vulnerabilities

Feb 18, 2026

ubuntu.com reports: USN-8031-2: Linux kernel (GCP FIPS) vulnerabilities

Feb 19, 2026

ubuntu.com reports: USN-8028-6: Linux kernel (HWE) vulnerabilities

Feb 19, 2026

ubuntu.com reports: USN-8031-3: Linux kernel vulnerabilities

Feb 19, 2026

ubuntu.com reports: USN-8052-1: Linux kernel (Low Latency) vulnerabilities

Feb 19, 2026

ubuntu.com reports: USN-8028-7: Linux kernel (Low Latency NVIDIA) vulnerabilities