Linux Kernel Driver Vulnerability in PDS_CORE Command Handling

CVE-2025-37887

Summary

The vulnerability in the Linux kernel's handling of the PDS_CORE_CMD_FW_CONTROL command can lead to unexpected behavior. When this command is unsupported, the system may output garbage values or crash entirely upon executing the 'devlink dev info' command. This occurs due to uninitialized stack variables, leading to unsafe memory access beyond defined array bounds. The resolution involves proper initialization of the affected structures and enhancing error handling mechanisms, ensuring valuable diagnostic information remains accessible even when command execution fails.

References