In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v2m: Prevent use after free of gicv2mgetfwnode()
With ACPI in place, gicv2mgetfwnode() is registered with the pci subsystem as pcimsigetfwnodecb(), which may get invoked at runtime during a PCI host bridge probe. But, the call back is wrongly marked as __init, causing it to be freed, while being registered with the PCI subsystem and could trigger:
Unable to handle kernel paging request at virtual address ffff8000816c0400 gicv2mgetfwnode+0x0/0x58 (P) pcisetbusmsidomain+0x74/0x88 pciregisterhost_bridge+0x194/0x548
This is easily reproducible on a Juno board with ACPI boot.
Retain the function for later use.
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"218255635725412159351549538318656277385",
"260002516531794249589782969324094189595",
"209219218090350331540889983619123819462",
"213239109899379597323367802464403423796"
]
},
"id": "CVE-2025-37819-02c9a7f0",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b63de43af8d215b0499eac28b2caa4439183efc1",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"218255635725412159351549538318656277385",
"260002516531794249589782969324094189595",
"209219218090350331540889983619123819462",
"213239109899379597323367802464403423796"
]
},
"id": "CVE-2025-37819-0e2dee11",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3939d6f29d34cdb60e3f68b76e39e00a964a1d51",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 219.0,
"function_hash": "303460424199449489436592482505986574754"
},
"id": "CVE-2025-37819-16dee1dd",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b63de43af8d215b0499eac28b2caa4439183efc1",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c",
"function": "gicv2m_get_fwnode"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"218255635725412159351549538318656277385",
"260002516531794249589782969324094189595",
"209219218090350331540889983619123819462",
"213239109899379597323367802464403423796"
]
},
"id": "CVE-2025-37819-426f378c",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3318dc299b072a0511d6dfd8367f3304fb6d9827",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 219.0,
"function_hash": "303460424199449489436592482505986574754"
},
"id": "CVE-2025-37819-769e0986",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3939d6f29d34cdb60e3f68b76e39e00a964a1d51",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c",
"function": "gicv2m_get_fwnode"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"218255635725412159351549538318656277385",
"260002516531794249589782969324094189595",
"209219218090350331540889983619123819462",
"213239109899379597323367802464403423796"
]
},
"id": "CVE-2025-37819-8c439ae6",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47bee0081b483b077c7560bc5358ad101f89c8ef",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"218255635725412159351549538318656277385",
"260002516531794249589782969324094189595",
"209219218090350331540889983619123819462",
"213239109899379597323367802464403423796"
]
},
"id": "CVE-2025-37819-9356ed71",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0c241dedc43a036599757cd08f356253fa3e5014",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 219.0,
"function_hash": "303460424199449489436592482505986574754"
},
"id": "CVE-2025-37819-a5ff7f8c",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc0d654eb4179b06d3206e4396d072108b9ba082",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c",
"function": "gicv2m_get_fwnode"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"218255635725412159351549538318656277385",
"260002516531794249589782969324094189595",
"209219218090350331540889983619123819462",
"213239109899379597323367802464403423796"
]
},
"id": "CVE-2025-37819-ab989f41",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc0d654eb4179b06d3206e4396d072108b9ba082",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 219.0,
"function_hash": "303460424199449489436592482505986574754"
},
"id": "CVE-2025-37819-b0832c44",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0c241dedc43a036599757cd08f356253fa3e5014",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c",
"function": "gicv2m_get_fwnode"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 219.0,
"function_hash": "303460424199449489436592482505986574754"
},
"id": "CVE-2025-37819-bda41990",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f95659affee301464f0d058d528d96b35b452da8",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c",
"function": "gicv2m_get_fwnode"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 219.0,
"function_hash": "303460424199449489436592482505986574754"
},
"id": "CVE-2025-37819-cf5f3249",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47bee0081b483b077c7560bc5358ad101f89c8ef",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c",
"function": "gicv2m_get_fwnode"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"218255635725412159351549538318656277385",
"260002516531794249589782969324094189595",
"209219218090350331540889983619123819462",
"213239109899379597323367802464403423796"
]
},
"id": "CVE-2025-37819-f15a45b7",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f95659affee301464f0d058d528d96b35b452da8",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 219.0,
"function_hash": "303460424199449489436592482505986574754"
},
"id": "CVE-2025-37819-f348686d",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3318dc299b072a0511d6dfd8367f3304fb6d9827",
"target": {
"file": "drivers/irqchip/irq-gic-v2m.c",
"function": "gicv2m_get_fwnode"
}
}
]