Linux Kernel Vulnerability in pds_core Affects Stability and Performance

CVE-2025-37886

Summary

A vulnerability in the Linux kernel's pds_core component relates to the management of the wait_context within the q_info structure. This issue occurs when the wait_context is treated as a temporary stack variable, leading to potential disruptions in the system. Specifically, under circumstances involving slow firmware development, timeouts in admin queue requests may result. If the firmware later completes its task and sends an interrupt, the system attempts to access a non-existent completion context, causing improper pointer usage and potentially resulting in kernel crashes. This flaw underscores the need for robust memory handling strategies within critical system functions.

References