CVE-2025-37796

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after free issue has been resolved in the Linux kernel. The problem occurs when the memory pointed to by priv is freed at the end of the at76 delete device function, but the code then attempts to access the udev field of the freed object to put the USB device. This may also lead to a memory leak of the USB device. The issue is fixed by using udev from the interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.