PT-2025-18435

CVE-2025-37754

·

Published

2025-04-02

·

Updated

2026-10-13

Description by

CVSS 3.1
8.4
High
MetricsAV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version
Description A vulnerability in the Linux kernel has been resolved, related to the HuC delayed loading fence. The issue occurs when the fence is not released on early probe errors, potentially causing kernel warnings and tainting the kernel. The vulnerability is introduced with a specific commit and can be reproduced using igt@i915 module load@reload-with-fault-injection.
Recommendations To resolve the issue, move the cleanup step to the driver release path. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
OESA-2025-1572
OESA-2025-1573
SUSE-SU-2025:01964-1
SUSE-SU-2025_01964-1
SUSE-SU-2025:01965-1
SUSE-SU-2025_01965-1
SUSE-SU-2025:02000-1
SUSE-SU-2025_02000-1
SUSE-SU-2025:02254-1
SUSE-SU-2025_02254-1
SUSE-SU-2025:02307-1
SUSE-SU-2025_02307-1
SUSE-SU-2025:02333-1
SUSE-SU-2025_02333-1
SUSE-SU-2025:02923-1
SUSE-SU-2025:20408-1
SUSE-SU-2025:20413-1
SUSE-SU-2025:20419-1
SUSE-SU-2025:20421-1
USN-7594-1
USN-7594-2
USN-7594-3
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1
Found an issue in the description? Have something to add? Feel free to write us 👾