cbcvebase.
CVE-2025-37754
published 2025-05-01

CVE-2025-37754: In the Linux kernel, the following vulnerability has been resolved: drm/i915/huc: Fix fence not released on early probe errors HuC delayed loading fence…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.20%
9.8th percentile
In the Linux kernel, the following vulnerability has been resolved: drm/i915/huc: Fix fence not released on early probe errors HuC delayed loading fence, introduced with commit 27536e03271da ("drm/i915/huc: track delayed HuC load with a fence"), is registered with object tracker early on driver probe but unregistered only from driver remove, which is not called on early probe errors. Since its memory is allocated under devres, then released anyway, it may happen to be allocated again to the fence and reused on future driver probes, resulting in kernel warnings that taint the kernel: [309.731371] ------------[ cut here ]------------ [309.731373] ODEBUG: init destroyed (active state 0) object: ffff88813d7dd2e0 object type: i915_sw_fence hint: sw_fence_dummy_notify+0x0/0x20 [i915] [309.731575] WARNING: CPU: 2 PID: 3161 at lib/debugobjects.c:612 debug_print_object+0x93/0xf0 ... [309.731693] CPU: 2 UID: 0 PID: 3161 Comm: i915_module_loa Tainted: G U 6.14.0-CI_DRM_16362-gf0fd77956987+ #1 ... [309.731700] RIP: 0010:debug_print_object+0x93/0xf0 ... [309.731728] Call Trace: [309.731730] ... [309.731949] __debug_object_init+0x17b/0x1c0 [309.731957] debug_object_init+0x34/0x50 [309.732126] __i915_sw_fence_init+0x34/0x60 [i915] [309.732256] intel_huc_init_early+0x4b/0x1d0 [i915] [309.732468] intel_uc_init_early+0x61/0x680 [i915] [309.732667] intel_gt_common_init_early+0x105/0x130 [i915] [309.732804] intel_root_gt_init_early+0x63/0x80 [i915] [309.732938] i915_driver_probe+0x1fa/0xeb0 [i915] [309.733075] i915_pci_probe+0xe6/0x220 [i915] [309.733198] local_pci_probe+0x44/0xb0 [309.733203] pci_device_probe+0xf4/0x270 [309.733209] really_probe+0xee/0x3c0 [309.733215] __driver_probe_device+0x8c/0x180 [309.733219] driver_probe_device+0x24/0xd0 [309.733223] __driver_attach+0x10f/0x220 [309.733230] bus_for_each_dev+0x7d/0xe0 [309.733236] driver_attach+0x1e/0x30 [309.733239] bus_add_driver+0x151/0x290 [309.733244] driver_register+0x5e/0x130 [309.733247] __pci_register_driver+0x7d/0x90

Affected

27 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.12.25-1 (forky)linux 6.12.25-1 (forky)
linuxlinux
linuxlinux>= 27536e03271da3dafcdddf735102041a26ad5bd0 < 9f5ef4a5eaa61a7a4ed31231da45deb85065397a9f5ef4a5eaa61a7a4ed31231da45deb85065397a
linuxlinux>= 27536e03271da3dafcdddf735102041a26ad5bd0 < c5a906806162aea62dbe5d327760ce3b7117ca17c5a906806162aea62dbe5d327760ce3b7117ca17
linuxlinux>= 27536e03271da3dafcdddf735102041a26ad5bd0 < 4bd4bf79bcfe101f0385ab81dbabb6e3f7d96c004bd4bf79bcfe101f0385ab81dbabb6e3f7d96c00
linuxlinux>= 27536e03271da3dafcdddf735102041a26ad5bd0 < f104ef4db9f8f3923cc06ed1fafb3da38df6006df104ef4db9f8f3923cc06ed1fafb3da38df6006d
linuxlinux>= 27536e03271da3dafcdddf735102041a26ad5bd0 < e3ea2eae70692a455e256787e4f54153fb739b90e3ea2eae70692a455e256787e4f54153fb739b90
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.12.25-16.12.25-1
linuxlinux_kernel>= 0 < 6.12.25-16.12.25-1
linuxlinux_kernel>= 0 < 6.8.0-100.1006.8.0-100.100
linuxlinux_kernel>= 0 < 6.14.0-22.226.14.0-22.22
linuxlinux_kernel>= 6.13 < 6.13.126.13.12
linuxlinux_kernel>= 6.14 < 6.14.36.14.3
linuxlinux_kernel>= 6.2 < 6.6.886.6.88
linuxlinux_kernel>= 6.7 < 6.12.246.12.24
msrcazl3_kernel_6.6.85.1-4_on_azure_linux_3.0
msrcazl3_kernel_6.6.92.2-1_on_azure_linux_3.0
ubuntulinux-aws
ubuntulinux-aws-6.8
ubuntulinux-gkeop
ubuntulinux-nvidia
ubuntulinux-nvidia-6.8
ubuntulinux-oracle
ubuntulinux-oracle-6.8

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_ubuntu3.2LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.