01 Record

CVE-2025-37836

PCI: Fix reference leak in pci_register_host_bridge()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

PCI: Fix reference leak in pci_register_host_bridge()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.29% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 21.4% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-05-09 06:41Z1 YR AGO

Last updated

2026-05-11 21:16Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-911Improper Update of Reference CountBase

Data version

5.2

Document digest

fff77f708b50977cb4ff3fbb7586ee0422c0f45611adf306bb81d56aa8f3bac3

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 to < f4db1b2c9ae3d013733c302ee70cac943b7070c0, 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 to < 3297497ad2246eb9243849bfbbc57a0dea97d76e, 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 to < b783478e0c53ffb4f04f25fb4e21ef7f482b05df, 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 to < bd2a352a0d72575f1842d28c14c10089f0cfe1ae, 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 to < 9707d0c932f41006a2701afc926b232b50e356b4, 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 to < bbba4c50a2d2a1d3f3bf31cc4b8280cb492bf2c7, 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 to < f9208aec86226524ec1cb68a09ac70e974ea6536, 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 to < 804443c1f27883926de94c849d91f5b7d7d696e9, 4.10—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/f4db1b2c9ae3d013733c302ee70cac943b7070c0
git.kernel.orghttps://git.kernel.org/stable/c/3297497ad2246eb9243849bfbbc57a0dea97d76e
git.kernel.orghttps://git.kernel.org/stable/c/b783478e0c53ffb4f04f25fb4e21ef7f482b05df
git.kernel.orghttps://git.kernel.org/stable/c/bd2a352a0d72575f1842d28c14c10089f0cfe1ae
git.kernel.orghttps://git.kernel.org/stable/c/9707d0c932f41006a2701afc926b232b50e356b4
git.kernel.orghttps://git.kernel.org/stable/c/bbba4c50a2d2a1d3f3bf31cc4b8280cb492bf2c7
git.kernel.orghttps://git.kernel.org/stable/c/f9208aec86226524ec1cb68a09ac70e974ea6536
git.kernel.orghttps://git.kernel.org/stable/c/804443c1f27883926de94c849d91f5b7d7d696e9
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

01 Record index

CVE-2025-37836

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-37836

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References