In the Linux kernel, the following vulnerability has been resolved:
pds_core: make wait_context part of q_info
Make the wait_context a full part of the q_info struct rather
than a stack variable that goes away after pdsc_adminq_post()
is done so that the context is still available after the wait
loop has given up.
There was a case where a slow development firmware caused
the adminq request to time out, but then later the FW finally
finished the request and sent the interrupt. The handler tried
to complete_all() the completion context that had been created
on the stack in pdsc_adminq_post() but no longer existed.
This caused bad pointer usage, kernel crashes, and much wailing
and gnashing of teeth.
References
Configurations
Configuration 1 (hide)
|
History
12 Nov 2025, 19:36
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux linux Kernel
Linux |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| References | () https://git.kernel.org/stable/c/1d7c4b2b0bbfb09b55b2dc0e2355d7936bf89381 - Patch | |
| References | () https://git.kernel.org/stable/c/3f77c3dfffc7063428b100c4945ca2a7a8680380 - Patch | |
| References | () https://git.kernel.org/stable/c/520f012fe75fb8efc9f16a57ef929a7a2115d892 - Patch | |
| References | () https://git.kernel.org/stable/c/66d7702b42ffdf0dce4808626088268a4e905ca6 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:* |
|
| CWE | CWE-476 |
Information
Published : 2025-05-09 07:16
Updated : 2025-11-12 19:36
NVD link : CVE-2025-37886
Mitre link : CVE-2025-37886
CVE.ORG link : CVE-2025-37886
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference