NetSight
IP …
medium5.5

CVE-2025-37836

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pci_register_host_bridge() If device_register() fails, call put_…

Impact

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pci_register_host_bridge() If device_register() fails, call put_device() to give up the reference to avoid a memory leak, per the comment at device_register(). Found by code review. [bhelgaas: squash Dan Carpenter's double free fix from https://lore.kernel.org/r/db806a6c-a91b-4e5a-a84b-6b7e01bdac85@stanley.mountain]

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.10 before 5.10.237
from 5.11 before 5.15.181
from 5.16 before 6.1.136
from 6.2 before 6.6.89
from 6.7 before 6.12.24
from 6.13 before 6.13.12
DebianDebian Linux
Version 11.0

References