CVE-2025-37819: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v2m: Prevent use after free of gicv2mgetfwnode()
With ACPI in place, gicv2mgetfwnode() is registered with the pci subsystem as pcimsigetfwnodecb(), which may get invoked at runtime during a PCI host bridge probe. But, the call back is wrongly marked as init, causing it to be freed, while being registered with the PCI subsystem and could trigger:
Unable to handle kernel paging request at virtual address ffff8000816c0400 gicv2mgetfwnode+0x0/0x58 (P) pcisetbusmsidomain+0x74/0x88 pciregisterhostbridge+0x194/0x548
This is easily reproducible on a Juno board with ACPI boot.
Retain the function for later use.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Apply the resolved fix in the Linux kernel: ensure irqchip/gic-v2m retains the gicv2m_get_fwnode() function so it is not freed after __init while still registered with PCI (prevent use-after-free during pci_register_host_bridge / pci_set_bus_msi_domain and runtime callback pci_msi_get_fwnode_cb()).
Linux kernel (irqchip/gic-v2m) gicv2m_get_fwnode lifecycle = Retain the function for later use (prevent use-after-free)
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37819?
CVE-2025-37819 is categorized as a moderate severity vulnerability due to its potential for use after free issues in the Linux kernel.
How do I fix CVE-2025-37819?
To address CVE-2025-37819, update the Linux kernel to the latest stable version that contains the patch for this vulnerability.
Which systems are affected by CVE-2025-37819?
CVE-2025-37819 affects the Linux kernel, specifically systems utilizing the irqchip and ACPI configuration.
What are the potential consequences of CVE-2025-37819?
Exploitation of CVE-2025-37819 could lead to stability issues or arbitrary code execution by allowing access to freed memory.
Is CVE-2025-37819 part of a larger vulnerability series?
CVE-2025-37819 addresses a specific issue related to IRQ chip management in the Linux kernel, but it is not part of a known series.